Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2023-7242

Ethercat Zeek Plugin Out-of-bounds Read

Description

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CISA Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek

Default version status: unaffected

  • 0 to ≤ d78dda6affected

References