Vulnerability Description
Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Modbus Tcp Server Add On Instructions | >= 2.00.00, < 2.04.00 |
Related Weaknesses (CWE)
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766Permissions RequiredVendor Advisory
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766Permissions RequiredVendor Advisory
FAQ
What is CVE-2023-0027?
CVE-2023-0027 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent r...
How severe is CVE-2023-0027?
CVE-2023-0027 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-0027?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Modbus Tcp Server Add On Instructions.