CVE-2023-3595
Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
- Record
CVE-2023-3595- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2023-44245
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
- Record
EUVD-2023-44245- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qvv4-3g8f-rgjx
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix...
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
- Record
GHSA-qvv4-3g8f-rgjx- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
- Record
CVE-2023-3595- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- rockwell auotmation 1756-en2tpxt series a
- rockwell automation 1756-en2f series a, b
- rockwell automation 1756-en2f series c
- rockwell automation 1756-en2fk series a, b
- rockwell automation 1756-en2fk series c
- rockwell automation 1756-en2t series a, b, c
- rockwell automation 1756-en2t series d
- rockwell automation 1756-en2tk series a, b, c
- rockwell automation 1756-en2tp series a
- rockwell automation 1756-en2tpk series a
- rockwell automation 1756-en2tr series a, b
- rockwell automation 1756-en2tr series c
Show 22 moreShow less
- rockwell automation 1756-en2trk series a, b
- rockwell automation 1756-en2trk series c
- rockwell automation 1756-en2trxt series a, b
- rockwell automation 1756-en2trxt series c
- rockwell automation 1756-en2txt series a, b, c
- rockwell automation 1756-en2txt series d
- rockwell automation 1756-en3tr series a
- rockwell automation 1756-en3tr series b
- rockwell automation 1756-en3trk series a
- rockwell automation 1756-en3trk series b
- rockwellautomation 1756-en2f series a firmware
- rockwellautomation 1756-en2f series b firmware
- rockwellautomation 1756-en2f series c firmware
- rockwellautomation 1756-en2t series a firmware
- rockwellautomation 1756-en2t series b firmware
- rockwellautomation 1756-en2t series c firmware
- rockwellautomation 1756-en2t series d firmware
- rockwellautomation 1756-en2tr series a firmware
- rockwellautomation 1756-en2tr series b firmware
- rockwellautomation 1756-en2tr series c firmware
- rockwellautomation 1756-en3tr series a firmware
- rockwellautomation 1756-en3tr series b firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-3595 is a critical vulnerability (CVSS 9.8) in Rockwell Auotmation 1756-en2tpxt Series A, published July 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.53%, the 92nd percentile. No source names a fixed version.