CVE-2023-7242

HIGH 8.2CVE-2023-7242 · Published 01/03/2024 · updated 17/06/2026

In short

CVE-2023-7242 is a HIGH (CVSS 8.2) vulnerability affecting icsnpp-ethercat (cisa).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
icsnpp-ethercat cisa	`≤ d78dda6`	No fix yet

Description

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory.

References

cisa.gov/news-events/ics-advisories/icsa-24-051-02 · US Government Resource

More vulnerabilities in icsnpp-ethercat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free