A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | 1756 | EN2T Series A, B, C — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2T Series D — <=11.002 |
| Rockwell Automation | 1756 | EN2TK Series A, B, C — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2TXT Series A, B, C — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2TXT Series D — <=11.002 |
| Rockwell Automation | 1756 | EN2TP Series A — <=11.002 |
| Rockwell Automation | 1756 | EN2TPK Series A — <=11.002 |
| Rockwell Auotmation | 1756 | EN2TPXT Series A — <=11.002 |
| Rockwell Automation | 1756 | EN2TR Series A, B — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2TR Series C — <=11.002 |
| Rockwell Automation | 1756 | EN2TRK Series A, B — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2TRK Series C — <=11.002 |
| Rockwell Automation | 1756 | EN2TRXT Series A, B — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2TRXT Series C — <=11.002 |
| Rockwell Automation | 1756 | EN2F Series A, B — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2F Series C — <=11.002 |
| Rockwell Automation | 1756 | EN2FK Series A, B — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN2FK Series C — <=11.002 |
| Rockwell Automation | 1756 | EN3TR Series A — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN3TR Series B — <=11.003 |
| Rockwell Automation | 1756 | EN3TRK Series A — <=5.008 & 5.028 |
| Rockwell Automation | 1756 | EN3TRK Series B — <=11.002 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.