CVE-2023-3596

Summary

CVE-2023-3596 is a denial-of-service vulnerability affecting Rockwell Automation's 1756-EN4* Ethernet/IP communication products. A malicious user can exploit this vulnerability by sending maliciously crafted Common Industrial Protocol (CIP) messages, leading the target system to assert and ultimately causing a denial of service. This issue poses a risk to industrial automation systems using the affected products and requires immediate attention for patching or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.