PT-2024-6562

CVE-2024-34026

Published

2024-04-04

Updated

2024-09-27

Description by

CVSS 2.0

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenPLC version v3 b4702061dc14d1024856f71b4543298d77007b88

Description: A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality. This vulnerability can be exploited by sending a specially crafted EtherNet/IP request, leading to remote code execution. An attacker can trigger this vulnerability by sending a series of EtherNet/IP requests.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Jared Rittle

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-121: Stack-based Buffer Overflow

Related identifiers