Log in Start free

Vulnerability · Published Mar 1, 2024 · Assigned by icscert

CVE-2023-7244Ethercat Zeek Plugin Out-of-bounds Write

Critical 9.8

In plain English

A critical-severity out-of-bounds write in Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek from CISA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.8%top 42.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution.

Affected products (as reported)

VendorProductVersions
CISA Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek 0 – through d78dda6

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References