Gff-Cw

**Name of the Vulnerable Software and Affected Versions** EIPStackGroup OpENer commit 76b95c **Description** A buffer overflow occurs in the `Get Attribute List()` function when processing a specially crafted Common Packet Format (CPF) packet, which is a standardized data structure used for communication. This flaw allows an attacker to trigger a Denial of Service (DoS), causing the system to become unavailable. **Recommendations** As a temporary workaround, restrict the processing of Common Packet Format (CPF) packets until a patch is available for commit 76b95c.

**Name of the Vulnerable Software and Affected Versions** snap7 version 1.4.3 **Description** A heap buffer overflow occurs in the `TS7Worker::PerformFunctionWrite()` function located in `/core/s7 server.cpp`. This issue allows an attacker to trigger a Denial of Service (DoS) by sending a specially crafted packet. A heap buffer overflow is a condition where a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** lib60870 versions 2.3.3 through 2.3.6 **Description** A heap buffer overflow occurs in the `HighPriorityASDUQueue hasUnconfirmedIMessages()` function. This flaw allows an attacker to trigger a Denial of Service (DoS) by sending a specially crafted payload. **Recommendations** As a temporary workaround, consider restricting the use of the `HighPriorityASDUQueue hasUnconfirmedIMessages()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** bacnet stack version 1.3.1 **Description** An out-of-bounds read exists in the `bacnet tag number decode()` function, which can be exploited by attackers to cause a denial of service. An out-of-bounds read occurs when the software reads data past the end of the intended buffer. **Recommendations** As a temporary workaround, consider restricting the use of the `bacnet tag number decode()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.