| Assigner | icscert |
| Reserved | 2024-02-01 |
| Published | 2024-03-01 |
| Updated | 2024-06-07 |
Description
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Problem types
Product status
Any version
Credits
Cameron Whitehead of HACK@UCF reported these vulnerabilities to CISA.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-24-051-02
