CVE-2022-43605: EIP Stack Group OpENer, грешка в паметта

Описание

Оригинално описание

An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Засегнати продукти

• EIP Stack Group OpENer: development commit 58ee13c
• opener_project opener: преди 2022-10-18

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в EIP Stack Group OpENer

• 10.0CVE-2022-43604
• 7.5CVE-2022-43606

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-43605
• https://nvd.nist.gov/vuln/detail/CVE-2022-43605
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1662
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1662