Ethercat Vulnerable to Out-of-Bounds Write Attack

CVE-2023-7244

What is CVE-2023-7244?

The vulnerability affects Industrial Control Systems Network Protocol Parsers (ICSNPP) specifically for Ethercat communication packets. In versions of the Zeek Plugin up to and including d78dda6, there is a potential for an out-of-bounds write during the primary analysis function. This security flaw can be exploited by an attacker to execute arbitrary code, possibly allowing unauthorized access and manipulation of the system. It highlights the importance of applying library updates and maintaining security practices to safeguard industrial control environments.

References