Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: RT-Labs SOEM — rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf Clear all filters
TI-2026-80300 CVE-2026-82947 · GHSA-fq96-jx7g-9639

Out-of-bounds reads in SOEM frame processing expose memory

Priority LOW 30

SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0017 Published 2026-10-26 Fixed in 2.0.1 CWE-125
TI-2026-80289 CVE-2026-82946 · GHSA-m2qv-7w8c-3r6g

NULL pointer dereference in SOEM mailbox error handling

Priority LOW 28

SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00169 Published 2026-10-26 Fixed in 2.0.1 CWE-476
TI-2026-80288 CVE-2026-82945 · GHSA-849v-9xpp-vgfg

Memory Corruption via FMMU Configuration Table Overflow in SOEM

Priority LOW 28

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00169 Published 2026-10-26 Fixed in 2.0.1 CWE-120
TI-2026-80287 CVE-2026-82944 · GHSA-55h8-h3gv-wfcx

Buffer overflow in SOEM CoE SDO multi-segment data transfers

Priority LOW 39

SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0021 Published 2026-10-26 Fixed in 2.0.1 CWE-120
TI-2026-80286 CVE-2026-82943 · GHSA-2h24-jp9f-47qx

Out-of-bounds read in SOEM lets malicious devices leak memory

Priority LOW 28

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00167 Published 2026-10-26 Fixed in 2.0.1 CWE-125
TI-2026-80282 CVE-2026-70388 · GHSA-3w9x-57hf-mwj3

SOEM Memory Corruption via Integer Underflow in Message Length Validation

Priority LOW 37

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00213 Published 2026-10-26 Fixed in 2.0.1 CWE-191