CVE-2023-2262
Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
- Record
CVE-2023-2262- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2023-33768
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
- Record
EUVD-2023-33768- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hvf2-xrfv-gr9f
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN*...
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
- Record
GHSA-hvf2-xrfv-gr9f- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
NVD
A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.
- Record
CVE-2023-2262- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
Affected products
- rockwell auotmation 1756-en2tpxt series a
- rockwell automation 1756-en2f series a, b
- rockwell automation 1756-en2f series c
- rockwell automation 1756-en2fk series a, b
- rockwell automation 1756-en2fk series c
- rockwell automation 1756-en2t series a, b, c
- rockwell automation 1756-en2t series d
- rockwell automation 1756-en2tk series a, b, c
- rockwell automation 1756-en2tp series a
- rockwell automation 1756-en2tpk series a
- rockwell automation 1756-en2tr series a, b
- rockwell automation 1756-en2tr series c
Show 43 moreShow less
- rockwell automation 1756-en2trk series a, b
- rockwell automation 1756-en2trk series c
- rockwell automation 1756-en2trxt series a, b
- rockwell automation 1756-en2trxt series c
- rockwell automation 1756-en2txt series a, b, c
- rockwell automation 1756-en2txt series d
- rockwell automation 1756-en3tr series a
- rockwell automation 1756-en3tr series b
- rockwell automation 1756-en3trk series a
- rockwell automation 1756-en3trk series b
- rockwellautomation 1756-en2f series a firmware
- rockwellautomation 1756-en2f series b firmware
- rockwellautomation 1756-en2f series c firmware
- rockwellautomation 1756-en2fk series a firmware
- rockwellautomation 1756-en2fk series b firmware
- rockwellautomation 1756-en2fk series c firmware
- rockwellautomation 1756-en2t series a firmware
- rockwellautomation 1756-en2t series b firmware
- rockwellautomation 1756-en2t series c firmware
- rockwellautomation 1756-en2t series d firmware
- rockwellautomation 1756-en2tk series a firmware
- rockwellautomation 1756-en2tk series b firmware
- rockwellautomation 1756-en2tk series c firmware
- rockwellautomation 1756-en2tp series a firmware
- rockwellautomation 1756-en2tpk series a firmware
- rockwellautomation 1756-en2tpxt series a firmware
- rockwellautomation 1756-en2tr series a firmware
- rockwellautomation 1756-en2tr series b firmware
- rockwellautomation 1756-en2tr series c firmware
- rockwellautomation 1756-en2trk series a firmware
- rockwellautomation 1756-en2trk series b firmware
- rockwellautomation 1756-en2trk series c firmware
- rockwellautomation 1756-en2trxt series a firmware
- rockwellautomation 1756-en2trxt series b firmware
- rockwellautomation 1756-en2trxt series c firmware
- rockwellautomation 1756-en2txt series a firmware
- rockwellautomation 1756-en2txt series b firmware
- rockwellautomation 1756-en2txt series c firmware
- rockwellautomation 1756-en2txt series d firmware
- rockwellautomation 1756-en3tr series a firmware
- rockwellautomation 1756-en3tr series b firmware
- rockwellautomation 1756-en3trk series a firmware
- rockwellautomation 1756-en3trk series b firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-2262 is a critical vulnerability (CVSS 9.8) in Rockwell Auotmation 1756-en2tpxt Series A, published September 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. No source names a fixed version.