CVE-2023-3596 — Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

CVE-2023-3596

Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service PUBLISHED

Description (CNA)

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / 1756-EN4TR Series A	affected <=5.001
Rockwell Automation / 1756-EN4TRK Series A	affected <=5.001
Rockwell Automation / 1756-EN4TRXT Series A	affected <=5.001

CWE

CWE-787

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010

ADP enrichment

CVE

No English description supplied.

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010

CISA-ADP

No English description supplied.

No references supplied.