CVE-2022-43606

Name of the Vulnerable Software and Affected Versions EIP Stack Group OpENer version 58ee13c

Description A use-of-uninitialized-pointer issue exists in the Forward Open connection management entry functionality. This can be triggered by a specially-crafted EtherNet/IP request, leading to the use of a null pointer and causing the server to crash. An attacker can exploit this by sending a series of EtherNet/IP requests.

Recommendations For EIP Stack Group OpENer version 58ee13c, consider disabling the Forward Open connection management entry functionality until a patch is available to prevent the server from crashing due to specially-crafted EtherNet/IP requests.