What is the CVSS score of CVE-2023-3595?

CVE-2023-3595 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 5.0%.

1756 En2F Series A Firmware CVE-2023-3595

CRITICAL

Out-of-bounds Write (CWE-787)

2023-07-12 PSIRT@rockwellautomation.com

Memory Corruption Buffer Overflow Rockwell RCE 1756 En2F Series A Firmware 1756 En2F Series B Firmware 1756 En2F Series C Firmware 1756 En2T Series A Firmware 1756 En2T Series B Firmware 1756 En2T Series C Firmware 1756 En2T Series D Firmware 1756 En2Tr Series A Firmware 1756 En2Tr Series B Firmware 1756 En2Tr Series C Firmware 1756 En3Tr Series A Firmware 1756 En3Tr Series B Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jul 12, 2023 - 13:15 nvd

CRITICAL 9.8

DescriptionNVD

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.

AnalysisAI

Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device. Affected products include: Rockwellautomation 1756-En2F Series A Firmware, Rockwellautomation 1756-En2F Series B Firmware, Rockwellautomation 1756-En2F Series C Firmware, Rockwellautomation 1756-En2T Series A Firmware, Rockwellautomation 1756-En2T Series B Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).