Rockwellautomation 1756-EN2T Series D Firmware vulnerabilities

3 CVEs affecting Rockwellautomation 1756-EN2T Series D Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2262, published 2023-09-20.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-3595, published 2023-07-12. Critical severity, CVSS 9.8. EPSS: 5.5% chance of exploitation in the next 30 days. Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with…
• CVE-2018-17924, published 2018-12-07. High severity, CVSS 8.6. EPSS: 4.3% chance of exploitation in the next 30 days. Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and…
• CVE-2023-2262, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a…