Description
Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffer overflow on Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior. This may allow an attacker to crash the affected device or cause it to become unresponsive.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Host Engineering | H0-ECOM100 Communications Module | All versions – ≤ Firmware v5.0.155 | — |
Advisories 1
- ICSA-22-263-04 Host Engineering Communications Module CISA ICS & IT advisories · Sep 20, 2022