[ CVE-2026-82943 · Published 26 Oct 2026 ]
Vulnerability in RT-Labs AB SOEM
CVSS 6.5
EPSS <1%No fix listed yet
[ Description ]Official description
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An attacker can exploit this to extract up to 64KB of data from the master's memory.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.