Description
499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Real Time Automation | 499ES EtherNet/IP (ENIP) Adaptor Source Code | unspecified – < 2.28 | 2.28 |
Advisories 3
- VDE-2020-050 Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service CERT@VDE · May 14, 2025
- VDE-2021-040 Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow CERT@VDE · May 14, 2025
- ICSA-20-324-03 Real Time Automation EtherNet/IP CISA ICS & IT advisories · Nov 17, 2020