CVE-2023-0027

4.3 mediumEPSS 0.8%

Medium (4.3) in rockwellautomation modbus tcp server add on instructions. EPSS 0.8% chance of exploitation in the next 30 days.

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2023-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rockwellautomation:modbus_tcp_server_add_on_instructions

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766

Check your stack JSON