CVE-2021-21777 — CRITICAL (10.0)

Vulnerability Description

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Opener Project	Opener	2.3

Related Weaknesses (CWE)

CWE-125

References

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1234ExploitThird Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1234ExploitThird Party Advisory

FAQ

What is CVE-2021-21777?

CVE-2021-21777 is a vulnerability with a CVSS score of 10.0 (CRITICAL). An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead t...

How severe is CVE-2021-21777?

CVE-2021-21777 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-21777?

Check the references section above for vendor advisories and patch information. Affected products include: Opener Project Opener.