exploitDog

CVE-2022-43606

Опубликовано: 16 мар. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Ссылки

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663
Exploit
Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663
Exploit
Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1663

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opener_project:opener:*:*:*:*:*:*:*:*

Версия до 2022-10-18 (исключая)

EPSS

Процентиль: 37%

0.00162

Низкий

7.5 High

CVSS3

Дефекты

CWE-824

Связанные уязвимости

GHSA-xh44-7m8v-gqg4

CVSS3: 7.5

github

почти 3 года назад

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

EPSS

Процентиль: 37%

0.00162

Низкий

7.5 High

CVSS3

Дефекты

CWE-824