Rockwell Automation ControlLogix Communication Modules Vulnerabilities (CVE-2023-3595 and CVE-2023-3596)

What is Rockwell Automation ControlLogix Communications Modules?




Rockwell Automation ControlLogix communications modules are devices from Rockwell Automation, a US-based automation technology company, and are used by various industry sectors including critical infrastructure to establish communication links between devices.








What is the Attack?




CVE-2023-3595 is an out-of-bounds write vulnerability that affects the vulnerable 1756 EN2* and 1756 EN3* series of Rockwell Automation ControlLogix EtherNet/IP communication modules. Successful exploitation of a vulnerable system via maliciously crafted Common Industrial Protocol (CIP) messages could …

attack automation communication communication modules communications controllogix critical critical infrastructure cve devices industry infrastructure links modules out-of-bounds out-of-bounds write rockwell rockwell automation rockwell automation controllogix sectors technology vulnerabilities vulnerability what is