Summary
A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products.
The indicated firmware versions are only used on products of hardware version 01.xx.xx.
Details
Impact
Attackers with network access to the EtherNet/IP network may send a specially crafted packet that may result in a denial-of-service condition of the affected products which will cause them to crash. Crashed products will reboot within some seconds.
Mitigation
Weidmueller strongly recommends applying the following external protective measures:
Restrict network access to the EtherNet/IP network containing affected products.
If remote access is required, use secure methods such as virtual private networks (VPNs).
Vulnerabilities 1
-
Critical 9.8
Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write
Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial…
Revision history
-
#1
Initial revision.
References
-
VDE-2021-004: Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write - HTML
https://certvde.com/en/advisories/VDE-2021-004/
-
Weidmueller PSIRT
https://www.weidmueller.com/int/solutions/solutions/industrial_security/index.jsp
-
CERT@VDE Security Advisories for Weidmueller Interface GmbH & Co. KG
https://certvde.com/en/advisories/vendor/weidmueller/