PT-2026-53653

CVE-2026-13592

Published

2026-06-29

Updated

2026-06-29

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions liftoff-sr CIPster versions up to e8e9dba09bf56962807d3504b783ccdb6287f3e4

Description An out-of-bounds write can occur within the BufWriter::append() function of the EtherNet IP Message Handler component. This issue allows for remote exploitation through manipulation of the affected function.

Recommendations Deploy patch 3a0159ed43125dcd024a1965f0289cb186bae9ff. As a temporary mitigation, restrict access to the BufWriter::append() function.

Exploitability

Exploit

Fix

Impacts

Researchers

Carnegie

Chuan Wei

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write