Ethercat Zeek Plugin fixes critical vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Ethercat Zeek Plugin fixes critical vulnerabilities

CISA recommends updating Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin to version 3bca34c or later.

Ethercat Zeek Plugin - out-of-bounds read (CVE-2023-7242)

CVSS 8.2 (High)

An unauthenticated remote attacker can crash the Zeek process and cause leakage of some information in memory when a specific Ethercat packet is parsed [1].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

More information:

CVE-2023-7242 at cve.org, NVD
CWE-125 at cwe.mitre.org

The vulnerability was publicly disclosed 20. 2. 2024.

Ethercat Zeek Plugin - out-of-bounds write (CVE-2023-7243)

CVSS 9.8 (Critical)

An unauthenticated remote attacker can execute arbitrary code when specific Ethercat datagrams are parsed [1].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

CVE-2023-7243 at cve.org, NVD
CWE-787 at cwe.mitre.org

The vulnerability was publicly disclosed 20. 2. 2024.

Ethercat Zeek Plugin - out-of-bounds write (CVE-2023-7244)

CVSS 9.8 (Critical)

An unauthenticated remote attacker can execute arbitrary code due to an out-of-bounds write in the primary Ethercat communication packet parsing function [1].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

CVE-2023-7244 at cve.org, NVD
CWE-787 at cwe.mitre.org

The vulnerability was publicly disclosed 20. 2. 2024.

Report feedback

[TLP:CLEAR] Ethercat Zeek Plugin fixes critical vulnerabilities

Ethercat Zeek Plugin - out-of-bounds read (CVE-2023-7242)

CVSS 8.2 (High)

Ethercat Zeek Plugin - out-of-bounds write (CVE-2023-7243)

CVSS 9.8 (Critical)

Ethercat Zeek Plugin - out-of-bounds write (CVE-2023-7244)

CVSS 9.8 (Critical)

Links