Details of VAR-202309-2098

ID

VAR-202309-2098

CVE

CVE-2023-2262

DESCRIPTION

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

Trust: 1.0

sources: NVD: CVE-2023-2262

AFFECTED PRODUCTS

vendor:	rockwellautomation	model:	1756-en2trxt series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trxt series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trk series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trxt series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2f series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series c	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tp series a	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tr series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2f series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series c	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trxt series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series d	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tr series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series c	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tr series c	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series c	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tr series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trxt series c	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3tr series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series c	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tpk series a	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tr series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trk series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2fk series c	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3tr series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2fk series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series c	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trk series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2f series c	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2fk series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3trk series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2f series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2txt series d	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3trk series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2fk series b	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2fk series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tpxt series a	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3trk series b	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2f series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trk series c	scope:	lte	version:	11.002	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2t series a	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2trk series b	scope:	gte	version:	5.008	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en2tk series a	scope:	lte	version:	5.028	Trust: 1.0
vendor:	rockwellautomation	model:	1756-en3tr series b	scope:	lte	version:	11.003	Trust: 1.0

sources: NVD: CVE-2023-2262

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-2262
value:	CRITICAL
Trust: 1.0
PSIRT@rockwellautomation.com:	CVE-2023-2262
value:	CRITICAL
Trust: 1.0

nvd@nist.gov:	CVE-2023-2262
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 2.0

sources: NVD: CVE-2023-2262 // NVD: CVE-2023-2262

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	CWE-787	Trust: 1.0

sources: NVD: CVE-2023-2262

EXTERNAL IDS

db:

NVD

id:

CVE-2023-2262

Trust: 1.0

sources: NVD: CVE-2023-2262

REFERENCES

url:

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140786

Trust: 1.0

sources: NVD: CVE-2023-2262

SOURCES

db:

NVD

id:

CVE-2023-2262

LAST UPDATE DATE

2024-08-14T13:19:49.369000+00:00

SOURCES UPDATE DATE

db:

NVD

id:

CVE-2023-2262

date:

2023-09-22T18:01:44.480

SOURCES RELEASE DATE

db:

NVD

id:

CVE-2023-2262

date:

2023-09-20T16:15:12.257