CVE-2026-82946
Received Received - Intake

SOEM Stack-Based Buffer Overflow Vulnerability

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: ENISA

Description
SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-82946
EUVD
EUVD-2026-109679

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
RT-Labs AB SOEM 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
CWE-690 The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in SOEM version 2.0.0 and earlier allows a malicious device to crash the master system by sending a specific sequence of two messages. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software tries to use the cleared pointer, causing a crash.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in the SOEM master system after receiving error responses. Check system logs for segmentation faults or similar crashes following network communication. Use network sniffing tools like Wireshark to inspect EtherCAT traffic for malformed or error responses from devices.

Impact Analysis

This vulnerability can cause the master system to crash, leading to denial of service. If the system is part of critical infrastructure or industrial control, it may disrupt operations, cause downtime, or require manual intervention to restart the system.

Mitigation Strategies

Update SOEM to a version later than 2.0.0 to address the pointer clearing issue. Implement input validation to discard unexpected messages arriving before timeout. Configure network firewalls to limit EtherCAT traffic to trusted devices only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82946. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart