NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-3596

CVSS 3.1: 7.5 high
EPSS: 4%p89
Published: Jul 12, 2023 · Jul 12, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-3596 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Vendors: rockwellautomation

Products: 1756-en4tr firmware, 1756-en4trk firmware, 1756-en4trxt firmware

Weakness: CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news

5 stories

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

Help Net SecurityJan 9, 12:23 UTC · Jan 9, 2024VulnerabilityExploitedCVE-2023-3595 CVE-2023-35962 · 1 read

60

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out

Help Net SecurityDec 5, 09:04 UTC · Dec 5, 2023VulnerabilityExploitedCVE-2023-3595 CVE-2023-3596 CVE-2023-36884+32

60

Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Exploit / PoCCVE-2023-3595 CVE-2023-35963

60

US CISA warns of Rockwell Automation ControlLogix flaws

Security AffairsJul 14, 19:26 UTC · Jul 14, 2023AdvisoryCVE-2023-3595 CVE-2023-35961 · 1 read

60

CISA warns of dangerous Rockwell industrial bug being exploited by gov’t group

The RecordJul 12, 20:03 UTC · Jul 12, 2023AdvisoryCVE-2023-3595 CVE-2023-3596

60