✕
Request a Demo
Rewterz
Rewterz Threat Advisory – ICS: Delta Electronics DIAScreen Vulnerability
September 22, 2023
Rewterz
Rewterz Threat Alert – North Korea Linked Konni APT Group – Active IOCs
September 22, 2023

Rewterz Threat Advisory – ICS: Rockwell Automation Select Logix Communication Vulnerability

Severity

High

Analysis Summary

CVE-2023-2262

Rockwell Automation Select Logix Communication Modules are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. By sending a maliciously crafted CIP request, a remote attacker could overflow a buffer and execute arbitrary code on the system.

Impact

  • Buffer Overflow

Indicators Of Compromise

CVE

  • CVE-2023-2262

Affected Vendors

Rockwell Automation

Affected Products

  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2T Series A
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2T Series B
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2T Series C
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2T Series D 10.10
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2TR Series A
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2TR Series B
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN2TR Series C 10.10
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN3TR Series A
  • Rockwell Automation 1756 ControlLogix EtherNet/IP Communications Modules 1756-EN3TR Series B 10.10

Remediation

Refer to Rockwell Automation Web site for patch, upgrade or suggested workaround information.

Rockwell Automation Website