CVE-2023-3596: Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-12 · updated 2026-06-17
Weakness: CWE-787

Description

Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.

Affected products

Rockwellautomation 1756-En4Tr Firmware: all versions
Rockwellautomation 1756-En4Trk Firmware: all versions
Rockwellautomation 1756-En4Trxt Firmware: all versions

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010

Get alerted when CVE-2023-3596 or the next vulnerability affects your stack