Vulnerability

[ Description ]Official description

EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/EIPStackGroup/OpENer
• github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipcommon.c
• github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c
• github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c
• github.com/EIPStackGroup/OpENer/issues/576