CVE-2023-0027: Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information
Rockwell Automation · Modbus TCP Server Add On Instructions
Vendor fix available · Affected: Rockwell Automation Modbus TCP Server Add On Instructions · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 58% of scored CVEs
DescriptionCVE.org
Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Rockwell Automation · Modbus TCP Server Add On Instructions2.00.00 - 2.00.03
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Rockwell Automation
- Published
- March 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-0027 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.