ICSA-21-105-02

icsaUScisa_csaf_ot

EIPStackGroup OpENer Ethernet/IP

view advisory published 2021-04-15

Successful exploitation of these vulnerabilities could cause a denial-of-service condition and data exposure.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2021-27500UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
CVE-2021-27498UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
CVE-2021-27482UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.
CVE-2021-27478UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan