C-Open CANopen stack multiple vulnerabilities
Advisory ansehen veröffentlicht 2026-10-01
RT-Labs AB C-Open CANopen contains a NULL pointer dereference and a write protection bypass vulnerability. These vulnerabilities can potentially crash the device or allow any CANopen node to overwrite read-only OD entries using two SDO frames.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-82358US | —OT erhöht | — | ||
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write perm… | ||||
| CVE-2026-82357US | — | — | ||
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all requir… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- BehobenC-Open
Fixed in 1.1.1.
https://rt-labs.com/wp-content/uploads/2026/09/RRTL-260929-01.pdf - BehobenC-Open
Fixed in 1.1.1.
https://rt-labs.com/wp-content/uploads/2026/09/RRTL-260929-01.pdf
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan