Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: CISA Component: Icsnpp-ethercat Clear all filters
TI-2023-06626 CVE-2023-7242 · GHSA-5mxr-cprf-ghf7

Ethercat Zeek Plugin Out-of-bounds Read

Priority MEDIUM 42

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00478 Published 2024-03-01 No fix listed CWE-125
TI-2023-06627 CVE-2023-7243 · GHSA-wm94-vqmp-vf4v

Ethercat Zeek Plugin Out-of-bounds Write

Priority MEDIUM 50

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2024-03-01 No fix listed CWE-787
TI-2023-06628 CVE-2023-7244 · GHSA-xp9h-4mhq-37w4

Ethercat Zeek Plugin Out-of-bounds Write

Priority MEDIUM 50

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2024-03-01 No fix listed CWE-787