Vulnerability Spotlight: DoS, code execution vulnerabilities in EIP Stack Group OpENer

guest · Dec 6, 2020

Vulnerability Spotlight: DoS, code execution vulnerabilities in EIP Stack Group OpENer
December 2, 2020
https://blog.talosintelligence.com/2020/12/vuln-spotlight-stack-group-opener-dec-2020.html

Cisco Talos recently discovered two vulnerabilities in the Ethernet/IP function of EIP Stack Group
OpENer. OpENer is an Ethernet/IP stack for I/O adapter devices. It supports multiple I/O and explicit connections and includes objects and services for making Ethernet/IP-compliant products as defined in the ODVA specifications. The software contains two vulnerabilities that could allow an attacker to execute code on the victim machine and cause a denial of service, respectively.
Click to expand...

VULNERABILITY DETAILS
EIP Stack Group OpENer Ethernet/IP server denial-of-service vulnerability (TALOS-2020-1143/CVE-2020-13530)
For more information on this vulnerability, read the complete advisory here.
EIP Stack Group OpENer Ethernet/IP server out-of-bounds write vulnerability (TALOS-2020-1170/CVE-2020-13556)
For more information on this vulnerability, read the complete advisory here.
Click to expand...

VERSIONS TESTED
Talos tested and confirmed that EIP Stack Group OpENer, version 2.3 and development commit 8c73bf3 are affected by these vulnerabilities.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: DoS, code execution vulnerabilities in EIP Stack Group OpENer

guest Guest

Log in or Sign up

Vulnerability Spotlight: DoS, code execution vulnerabilities in EIP Stack Group OpENer

guest Guest

Useful Searches