PoC Index85,101 CVEs with PoCs

CVE-2022-43605

CRITICAL 9.8EPSS 14.4%

An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Affected
EIP Stack Group · OpENer
CVSS v3.1 NVD
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1 CISCO
10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
14.37% chance of exploitation in the next 30 days, 97th percentile
Published
2023-03-16
Updated
2024-08-03

Proof-of-concept exploits (1)

References