Skip to content
OpenAdvisories
High · 8.6 CVE-2021-21777 EUVD-2021-8949GHSA-84vv-m336-cjrf

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development c…

Published Jun 17, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read.

Affected products

VendorProductAffectedFixed
— EIP Stack Group EIP Stack Group OpENer 2.3 ,EIP Stack Group OpENer development commit 8c73bf3 —

References