Vulnerabilities > CVE-2024-39590 - Incorrect Type Conversion or Cast vulnerability in Openplcproject Openplc V3 Firmware 20240528

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
openplcproject
CWE-704

Summary

Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Write_Reply` function

Vulnerable Configurations

Part Description Count
OS
Openplcproject
1

Common Weakness Enumeration (CWE)