Vulnerability Description
A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opener Project | Opener | < 2022-10-18 |
Related Weaknesses (CWE)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663ExploitThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663ExploitThird Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1663
FAQ
What is CVE-2022-43606?
CVE-2022-43606 is a vulnerability with a CVSS score of 7.5 (HIGH). A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP ...
How severe is CVE-2022-43606?
CVE-2022-43606 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-43606?
Check the references section above for vendor advisories and patch information. Affected products include: Opener Project Opener.