CVE-2023-3596

—

CVSS 3.1

7.5 high

EPSS

4%p89

Published

Jul 12, 2023 (Jul 12, 2023)

Modified

Jun 17, 2026

Description

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Vendors: rockwellautomation
Products: 1756-en4tr firmware, 1756-en4trk firmware, 1756-en4trxt firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news5 stories

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

Help Net SecurityJan 9, 12:23 UTC · Jan 9, 2024Vulnerability in the wildCVE-2023-3595 CVE-2023-3596

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out

Help Net SecurityDec 5, 09:04 UTC · Dec 5, 2023Vulnerability in the wildCVE-2023-3595 CVE-2023-3596 CVE-2023-36884+3 CVEs

Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Exploit / PoC CVE-2023-3595 CVE-2023-3596

US CISA warns of Rockwell Automation ControlLogix flaws

Security AffairsJul 14, 19:26 UTC · Jul 14, 2023Advisory CVE-2023-3595 CVE-2023-3596

CISA warns of dangerous Rockwell industrial bug being exploited by gov’t group

The RecordJul 12, 20:03 UTC · Jul 12, 2023Advisory CVE-2023-3595 CVE-2023-3596