CVE-2022-43605

The CVE-2022-43605 issue affects EIP Stack Group OpENer (SetAttributeList attribute_count_request). A crafted EtherNet/IP request can trigger an out-of-bounds write in development commit 58ee13c, potentially crashing the server or enabling remote code execution. Talos’ report confirms the vulnera...

Vulnerability Spotlight: EIP Stack Group OpENer open to two remote code execution vulnerabilities

Jared Rittle of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered three vulnerabilities in EIP Stack Group OpENer, an ethernet/IP stack for I/O adapter devices, that could allow an attacker to cause a targeted server to crash or open the door to remote code execution...