Buffer Overflow in EIPStackGroup OpENer

Executive Summary

This vulnerability is a buffer overflow in the GetAttributeList() function of EIPStackGroup OpENer v2.3 / master commit 76b95cf. It exists in the EtherNet/IP Get_Attribute_List service and allows a remote attacker to cause a denial of service by sending specially crafted requests.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for crashes or memory corruption in OpENer's GetAttributeList() function when processing EtherNet/IP Get_Attribute_List service requests. Check for repeated requests targeting the same attribute (e.g., attribute 1 on Identity instance 1) with optional sockaddr info items (0x8000 and 0x8001).

Commands to detect: Use network monitoring tools like Wireshark to capture EtherNet/IP traffic and look for malformed GetAttributeList responses. Check OpENer logs for crashes or segmentation faults during explicit-message handling.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to a denial of service, meaning an attacker could crash the affected system or service, disrupting normal operations. This could impact availability of systems using the vulnerable OpENer implementation.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability, a buffer overflow in OpENer's GetAttributeList() function, could lead to denial of service attacks on industrial systems. Such disruptions may impact systems handling sensitive data, potentially violating compliance requirements for availability in standards like GDPR (Article 32) and HIPAA (Security Rule 164.308(a)(7)). However, specific compliance impacts depend on system context and data processed.

Useful 0 Not Useful 0

Mitigation Strategies

Update OpENer to a patched version beyond commit 76b95cf. If unavailable, restrict network access to EtherNet/IP services or disable the Get_Attribute_List service until a fix is applied.

Useful 0 Not Useful 0