This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.ROCKWELL_AUTOMATION_CONTROLLOGIX_1756.NBINRockwell Automation ControlLogix Communications Modules Multiple Vulnerabilities
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
53.3%
Rockwell Automation ControlLogix Communications Modules are affected by multiple vulnerabilities, as follows:
-
A remote code execution vulnerability via crafted CIP messages. (CVE-2023-3595)
-
A denial of service vulnerability via crafted CIP messages. (CVE-2023-3596)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.
Binary data rockwell_automation_controllogix_1756.nbinRelated
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
53.3%