A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
History

Thu, 26 Sep 2024 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Openplcproject openplc V3 Firmware
Weaknesses CWE-787
CPEs cpe:2.3:o:openplcproject:openplc_v3_firmware:2024-04-04:*:*:*:*:*:*:*
Vendors & Products Openplcproject openplc V3 Firmware

Wed, 18 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Openplcproject
Openplcproject openplc V3
CPEs cpe:2.3:h:openplcproject:openplc_v3:-:*:*:*:*:*:*:*
Vendors & Products Openplcproject
Openplcproject openplc V3
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 18 Sep 2024 14:45:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2024-09-18T14:35:55.073Z

Updated: 2024-09-18T18:23:23.132Z

Reserved: 2024-05-30T16:04:38.960Z

Link: CVE-2024-34026

cve-icon Vulnrichment

Updated: 2024-09-18T16:03:10.440Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-18T15:15:14.623

Modified: 2024-09-26T20:52:39.357

Link: CVE-2024-34026

cve-icon Redhat

No data.