CVE-2023-7244

CRITICAL 9.8CVE-2023-7244 · Published 01/03/2024 · updated 17/06/2026

In short

CVE-2023-7244 is a CRITICAL (CVSS 9.8) vulnerability affecting icsnpp-ethercat (cisa).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
icsnpp-ethercat cisa	`≤ d78dda6`	No fix yet

Description

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution.

References

cisa.gov/news-events/ics-advisories/icsa-24-051-02 · US Government Resource

More vulnerabilities in icsnpp-ethercat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free