Pepperl+Fuchs: Use after free vulnerability in Smart-Ex 02 and Smart-Ex 03
A critical security vulnerability was discovered in the products, which is caused by the IPv6 stack in the Linux kernel.The impact of the vulnerability on the affected products may result in Elevation of privileges
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-36971US | high7.8OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
net: fix __dst_negative_advice() race
__dst_negative_advice() does not enforce proper RCU rules when
sk->dst_c… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- Mitigation
A protective measure is required. Control access for privileged users. Use IPv4 instead of IPv6. Update the products, when an update is available. The Issue will be fixed with MR11 on Smart-Ex 02 in September 2024. The Issue will be fixed with MR3 on SMART-EX 03 in August 2024.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan