CVE-2022-43605
Published: 16 March 2023
Summary
CVE-2022-43605 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Opener Project Opener. Its CVSS base score is 10.0 (Critical).
Operationally, ranked in the top 7.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer at development commit 58ee13c. The flaw, tracked as CWE-787, is triggered by a specially crafted EtherNet/IP request and can result in memory corruption within the affected EtherNet/IP server component.
An unauthenticated attacker can send a series of EtherNet/IP requests over the network to exploit the issue. Successful exploitation may cause the server to crash or permit remote code execution, consistent with the CVSS 10.0 rating reflecting network attack vector, low complexity, and full impact to confidentiality, integrity, and availability.
Public advisories from Talos Intelligence detail the vulnerability under TALOS-2022-1662 and are available at the referenced URLs.
The associated EPSS score has remained flat at 0.0764 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-46601
Vulnerability details
An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for…
more
remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.