CVE-2022-1737

mediumPriorität · verfolgen · 30EPSS 0.013 · 69. PerzentilDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.26% (69th) EPSS
CVSS 5 · medium
Is it mine?
52 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behoben1732E-12X4M12P5QCDR Series Acisa_csaf_ot

    1732E-12X4M12P5QCDR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-12X4M12QCDR Series Acisa_csaf_ot

    1732E-12X4M12QCDR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-16CFGM12P5QCR Series Acisa_csaf_ot

    1732E-16CFGM12P5QCR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-16CFGM12P5QCWR Series Bcisa_csaf_ot

    1732E-16CFGM12P5QCWR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-16CFGM12QCR Series Acisa_csaf_ot

    1732E-16CFGM12QCR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-16CFGM12QCWR Series Acisa_csaf_ot

    1732E-16CFGM12QCWR Series A: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-16CFGM12R Series Bcisa_csaf_ot

    1732E-16CFGM12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-8X8M12DR Series Bcisa_csaf_ot

    1732E-8X8M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-IB16M12DR Series Bcisa_csaf_ot

    1732E-IB16M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-IB16M12R Series Bcisa_csaf_ot

    1732E-IB16M12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-OB16M12DR Series Bcisa_csaf_ot

    1732E-OB16M12DR Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1732E-OB16M12R Series Bcisa_csaf_ot

    1732E-OB16M12R Series B: Versions 3.011 and prior. Upgrade to 3.012

  • Behoben1734-AENT/1734-AENTR Series Bcisa_csaf_ot

    1734-AENT/1734-AENTR Series B: Versions 5.019 and prior. Upgrade to 5.021

  • Behoben1734-AENT/1734-AENTR Series Ccisa_csaf_ot

    1734-AENT/1734-AENTR Series C: Versions 7.011 and prior. Upgrade to 7.013

  • Behoben1738-AENT/ 1738-AENTR Series Bcisa_csaf_ot

    1738-AENT/ 1738-AENTR Series B: Versions 6.011 and prior. Upgrade to 6.013

  • Behoben1794-AENTR Series Acisa_csaf_ot

    1794-AENTR Series A: Versions 2.011 and prior. Upgrade to 2.012

  • Behoben1799ER-IQ10XOQ10 Series Bcisa_csaf_ot

    1799ER-IQ10XOQ10 Series B: Versions 3.011 and prior. Upgrade to 3.012

  • MitigationFirmware 01.00.00 <= 01.08.00 installed on UR20-FBC-EIPweidmueller_psirt

    Weidmueller strongly recommends applying the following external protective measures: Restrict network access to the EtherNet/IP network containing affected products. If remote access is required, use secure methods such as virtual private networks (VPNs).

  • MitigationEtherNet/IP Adapter DLL Kit (EIPA)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Adapter Development Kit (EADK)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Scanner DLL Kit (EIPS)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • MitigationEtherNet/IP Scanner Development Kit (EDKS)cisa_csaf_ot

    Weidmüller Interface GmbH & Co. KG

    https://cert.vde.com/en/advisories/VDE-2021-004
  • Mitigation1732E-12X4M12P5QCDR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-12X4M12QCDR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12P5QCR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12P5QCWR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12QCR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12QCWR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-16CFGM12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-8X8M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-IB16M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-IB16M12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-OB16M12DR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1732E-OB16M12R Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1734-AENT/1734-AENTR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1734-AENT/1734-AENTR Series Ccisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1738-AENT/ 1738-AENTR Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1794-AENTR Series Acisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

  • Mitigation1799ER-IQ10XOQ10 Series Bcisa_csaf_ot

    Rockwell Automation encourages users of the affected software to apply the risk mitigations below, if possible. Additionally, users are encouraged to implement suggested security best practices to minimize the risk of vulnerability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.08.6highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · CISA US
v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Weidmüller PSIRT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-787USCWE-787USCWE-787USCWE-787US
05

betroffene Produkte (52)

Betroffene Produkte und Versionsbereiche.

20 von 52 angezeigt
06

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • VDE-2021-004Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write2022-06-21csaf · weidmueller_psirtDE

    A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products. The indicated firmware versions are only used on products of hardware version 01.xx.xx.

  • ICSA-22-174-04Pyramid Solutions EtherNet/IP Adapter Development Kit2022-06-23icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow an attacker with access to the EtherNet/IP network to send a specially crafted packet that may result in a denial-of-service condition.

  • ICSA-23-236-06Rockwell Automation Select Distributed I/O Communication Modules2023-08-24icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otweidmueller_psirtNVDCVE.orgMITRE
veröffentlicht 2022-07-12geändert 2026-06-17
09

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan