CVE-2022-43606 — EIP Stack Group / OpENer

Description (CNA)

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Affected (CNA)

Vendor / product	Versions
EIP Stack Group / OpENer	affected development commit 58ee13c

CWE

CWE-824

References

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663

ADP enrichment

CVE

No English description supplied.

https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1663
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1663

CISA-ADP

No English description supplied.

No references supplied.