Is CVE-2023-3595 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2023-3595 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2023-3595 — Security Advisory

Minnesota's coordinated water-utility cyberattack didn't exploit a misconfiguration. It exploited a design — internet-facing PLCs with a vulnerability the vendor cannot patch.

CVSS 9.8 2023

What WebPulse reported · 1 analysis

Thirty Water Systems in 48 Hours: The Architecture Was the Attack Surface

Minnesota's coordinated water-utility cyberattack didn't exploit a misconfiguration. It exploited a design — internet-facing PLCs with a vulnerability the vendo

July 30, 2026

View CVE-2023-3595 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2023-39910 CVE-2023-31290 CVE-2023-23752