CVE-2023-3595 is a critical severity vulnerability with a CVSS score of 9.8. No known exploits currently, and patches are available. This is classified as a zero-day vulnerability.
Moderate probability of exploitation
EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
| Vendor | Product |
|---|---|
| Rockwellautomation | 1756 En3tr Series A |
| Rockwellautomation | 1756 En3tr Series B Firmware |
| Rockwellautomation | 1756 En2f Series B Firmware |
| Rockwellautomation | 1756 En2t Series B Firmware |
| Rockwellautomation | 1756 En2tr Series C Firmware |
| Rockwellautomation | 1756 En2f Series B |
| Rockwellautomation | 1756 En2t Series A Firmware |
| Rockwellautomation | 1756 En2tr Series B Firmware |
| Rockwellautomation | 1756 En2tr Series C |
| Rockwellautomation | 1756 En3tr Series B |
And 14 more...
Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.