CVE-2023-7242

Industrial Control Systems Network Protocol Parsers (ICSNPP) - EthercatZeek Plugin versions d78dda6 and prior are vulnerable to out-of-boundsread during the process of analyzing a specific Ethercat packet. Thiscould allow an attacker to crash the Zeek process and leak someinformation in memory.

CVE-2023-7244

Industrial Control Systems Network Protocol Parsers (ICSNPP) - EthercatZeek Plugin versions d78dda6 and prior are vulnerable to out-of-boundswrite in their primary analyses function for Ethercat communicationpackets. This could allow an attacker to cause arbitrary code execution.

CVE-2023-7243

Industrial Control Systems Network Protocol Parsers (ICSNPP) - EthercatZeek Plugin versions d78dda6 and prior are vulnerable to out-of-boundswrite while analyzing specific Ethercat datagrams. This could allow anattacker to cause arbitrary code execution.