Skip to content
OpenAdvisories
High · 7.5 CVE-2024-36980 EUVD-2024-36330GHSA-g38f-j3m7-3p88

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f…

Published Sep 18, 2024 · Updated Nov 4, 2025 · Assigned by talos

Description

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the first instance of the incorrect comparison.

Affected products

VendorProductAffectedFixed
OpenPLC OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88 —

References