CVE-2023-7242: Ethercat Zeek Plugin Out-of-bounds Read

Published Mar 1, 2024
·
Updated

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory.

Affected Software

1 affected component
CISA Icsnpp-ethercat Zeek<=d78dda6

Remediation

Information

CISA recommends that users update Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin to commit 3bca34c or later https://github.com/cisagov/icsnpp-ethercat .To help reduce successful exploitation, users are encouraged to keep critical software updates and patches up to date in their system networks.

Event History

Mar 1, 2024
CVE Published
via MITRE·08:17 PM
Data Sourced
via MITRE·08:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2023-7242?

CVE-2023-7242 is classified as a moderate vulnerability due to its potential to crash the Zeek process and cause disruptions in ICS networks.

2

How do I fix CVE-2023-7242?

To mitigate CVE-2023-7242, upgrade to Zeek plugin versions newer than d78dda6 that have addressed this vulnerability.

3

What type of vulnerability is CVE-2023-7242?

CVE-2023-7242 is an out-of-bounds read vulnerability affecting the Ethercat parser in the ICSNPP Zeek plugin.

4

What could be the potential impact of CVE-2023-7242?

The potential impact of CVE-2023-7242 includes crashing the Zeek process and possibly leaking information from the ICS network.

5

Which software versions are affected by CVE-2023-7242?

CVE-2023-7242 affects the ICSNPP Ethercat Zeek plugin versions d78dda6 and earlier.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203