Description (CNA)
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / 1756-EN2T Series A, B, C | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2T Series D | affected <=11.002 |
| Rockwell Automation / 1756-EN2TK Series A, B, C | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2TXT Series A, B, C | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2TXT Series D | affected <=11.002 |
| Rockwell Automation / 1756-EN2TP Series A | affected <=11.002 |
| Rockwell Automation / 1756-EN2TPK Series A | affected <=11.002 |
| Rockwell Auotmation / 1756-EN2TPXT Series A | affected <=11.002 |
| Rockwell Automation / 1756-EN2TR Series A, B | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2TR Series C | affected <=11.002 |
| Rockwell Automation / 1756-EN2TRK Series A, B | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2TRK Series C | affected <=11.002 |
| Rockwell Automation / 1756-EN2TRXT Series A, B | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2TRXT Series C | affected <=11.002 |
| Rockwell Automation / 1756-EN2F Series A, B | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2F Series C | affected <=11.002 |
| Rockwell Automation / 1756-EN2FK Series A, B | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN2FK Series C | affected <=11.002 |
| Rockwell Automation / 1756-EN3TR Series A | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN3TR Series B | affected <=11.003 |
| Rockwell Automation / 1756-EN3TRK Series A | affected <=5.008 & 5.028 |
| Rockwell Automation / 1756-EN3TRK Series B | affected <=11.002 |
CWE
CWE-121
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.