Skip to content
OpenAdvisories
High ICSA-21-105-02 4 CVEs

EIPStackGroup OpENer Ethernet/IP

Published Apr 15, 2021 · Updated Apr 15, 2021

Vendor: EIP Stack Group Product: OpENer

Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition and data exposure.

Vulnerabilities 4

  • High 8.2
    CVE-2021-27478

    EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.

    EIP Stack Group OpENer EtherNet/IP
  • High 7.5
    CVE-2021-27482

    EIPStackGroup OpENer Ethernet/IP Out-of-bounds Read

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.

    EIP Stack Group OpENer EtherNet/IP
  • High 7.5
    CVE-2021-27498

    EIPStackGroup OpENer Ethernet/IP Reachable Assertion

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

    EIP Stack Group OpENer EtherNet/IP
  • High 7.5
    CVE-2021-27500

    EIPStackGroup OpENer Ethernet/IP Reachable Assertion

    A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

    EIP Stack Group OpENer EtherNet/IP

Revision history

  1. #1

    ICSA-21-105-02 EIPStackGroup OpENer Ethernet IP

References