CVE-2024-34026 in OpenPLCinfo

Zusammenfassung

von MITRE • 18.09.2024

A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Talos

Reservieren

30.05.2024

Veröffentlichung

18.09.2024

Moderieren

akzeptiert

Eintrag

VDB-278046

CPE

bereit

CWE

CWE-121 (bestätigt)

CVSS

9.8 (NVD)

EPSS

0.02414

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-34026
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-34026
CVE Details	https://www.cvedetails.com/cve/CVE-2024-34026/

◂ Zurück Übersicht Weiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!