Rockwell Automation Fixes Multiple Vulnerabilities in ControlLogix Communications Modules

On July 12, Rockwell Automation published an advisory addressing two vulnerabilities in its Allen-Bradley ControlLogix Communications Modules, which are used to enable communication between systems. These modules are found in devices that are used across critical infrastructure industries such as water, transportation and energy.

• CVE-2023-3595
  • Remote Code Execution Vulnerability
  • CVSSv3: 9.8
  • Severity: Critical
• CVE-2023-3596
  • Denial of Service Vulnerability
  • CVSSv3: 7.5
  • Severity: High

For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.