Out-of-Bounds Read in EIPStackGroup OpENer

Executive Summary

This is an out-of-bounds read vulnerability in EIPStackGroup OpENer v2.3 and its master branch up to commit 76b95cf. It exists in the server-side CIP SetAttributeList service, allowing a remote attacker to cause a denial of service by reading memory outside the intended bounds.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring for malformed CIP SetAttributeList requests or unusual network traffic patterns targeting the OpENer stack. Inspect logs for repeated connection attempts or crashes in OpENer processes. Use network monitoring tools like Wireshark to capture and analyze EtherNet/IP traffic for malformed SetAttributeList packets. Check for out-of-bounds read errors in system logs when OpENer is running.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could allow an attacker to disrupt the availability of services running OpENer by triggering a denial of service. This may cause applications relying on the affected service to crash or become unresponsive.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial of service via out-of-bounds read, which could disrupt industrial automation systems. Such disruptions may impact data availability, potentially violating GDPR's integrity principle or HIPAA's access requirements for critical systems.

Useful 0 Not Useful 0

Mitigation Strategies

Update EIPStackGroup OpENer to a patched version beyond commit 76b95cf. If no patch is available, disable the SetAttributeList service or restrict network access to the vulnerable system.

Useful 0 Not Useful 0