CVE-2021-21777: Critical severity opener project opener vulnerability
Published Jun 17, 2021
·Updated
An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read.
Affected Software
1 affected component
Opener Project Opener=2.3
Event History
Jun 17, 2021
CVE Published
via MITRE·10:48 AM
Data Sourced
via MITRE·10:48 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this information disclosure vulnerability?
The vulnerability ID is CVE-2021-21777.
2
What is the severity of CVE-2021-21777?
The severity of CVE-2021-21777 is critical with a severity value of 10.
3
What is affected by CVE-2021-21777?
EIP Stack Group OpENer version 2.3 is affected by CVE-2021-21777.
4
How does CVE-2021-21777 work?
CVE-2021-21777 is an information disclosure vulnerability in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3, where a specially crafted network request can lead to an out-of-bounds read.
5
Is there a fix for CVE-2021-21777?
To fix CVE-2021-21777, it is recommended to upgrade to a patched version of EIP Stack Group OpENer.