Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write
A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products. The indicated firmware versions are only used on products of hardware version 01.xx.xx.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1737US | high7.5 | — | ||
Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unaut… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- MitigationFirmware 01.00.00 <= 01.08.00 installed on UR20-FBC-EIP
Weidmueller strongly recommends applying the following external protective measures: Restrict network access to the EtherNet/IP network containing affected products. If remote access is required, use secure methods such as virtual private networks (VPNs).
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan