ICSNPP - Ethercat Zeek Plugin

🗓️ 20 Feb 2024 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 27 Views

Vulnerabilities in ICSNPP Ethercat Zeek Plugin versions d78dda6 and prior allow remote code execution. Update to commit 3bca34c or later.

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the Zeek plugin for industrial control systems’ network protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	15 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zeek plugin for industrial system control protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	15 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat, which involves reading data beyond the buffer in memory, allows attackers to cause service failures or gain unauthorized access to protected information.	18 Mar 202400:00	–	bdu_fstec
Circl	CVE-2023-7242	1 Mar 202422:31	–	circl
Circl	CVE-2023-7243	1 Mar 202422:31	–	circl
Circl	CVE-2023-7244	1 Mar 202422:31	–	circl
CNNVD	Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin Buffer Error Vulnerability	1 Mar 202400:00	–	cnnvd
CNNVD	Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin Buffer Error Vulnerability	1 Mar 202400:00	–	cnnvd
CNNVD	Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin Buffer Error Vulnerability	1 Mar 202400:00	–	cnnvd
CVE	CVE-2023-7242	1 Mar 202420:17	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-051-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-051-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

20 Feb 2024 07:00Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.0016

SSVC

icsnpp ethercat zeek plugin remote code execution vulnerability update industrial control systems network exposure firewall cisa