CVE-2026-82943 — MEDIUM (6.5)

Vulnerability Description

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An attacker can exploit this to extract up to 64KB of data from the master's memory.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-195 CWE-125 CWE-200

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf

FAQ

What is CVE-2026-82943?

CVE-2026-82943 is a vulnerability with a CVSS score of 6.5 (MEDIUM). SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software use...

How severe is CVE-2026-82943?

CVE-2026-82943 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-82943?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.