Memory Corruption via Integer Underflow in Message Length Validation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.0.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
SOEM (Simple Open EtherCAT Master) is affected, and a malicious device on the network can send specially crafted messages that corrupt memory on the master system. This could potentially allow an attacker to run arbitrary code on that system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowing negative or extremely large values to bypass safety checks. This can corrupt memory and potentially allow an attacker to execute arbitrary code on the master system.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- RT-Labs AB SOEM
fixed in 2.0.1