CVE-2024-34026

Name of the Vulnerable Software and Affected Versions: OpenPLC version v3 b4702061dc14d1024856f71b4543298d77007b88

Description: A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality. This vulnerability can be exploited by sending a specially crafted EtherNet/IP request, leading to remote code execution. An attacker can trigger this vulnerability by sending a series of EtherNet/IP requests.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.