ICSA-21-105-02

icsaUScisa_csaf_ot

EIPStackGroup OpENer Ethernet/IP

Advisory ansehen veröffentlicht 2021-04-15

Successful exploitation of these vulnerabilities could cause a denial-of-service condition and data exposure.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-27500UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
CVE-2021-27498UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
CVE-2021-27482UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.
CVE-2021-27478UShigh7.5—
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan