Frame Processing Vulnerabilities in SOEM Software by RT Labs
CVE-2026-82947

7.1HIGH

Key Information:

Vendor

Rt-labs Ab

Status
Soem
Vendor
CVE Published:
26 October 2026

What is CVE-2026-82947?

SOEM versions up to 2.0.0 are susceptible to multiple vulnerabilities in frame processing. These issues arise because the software inadequately validates length and offset values extracted from device messages against the sizes of allocated buffers. As a result, a malicious device could exploit this weakness by causing the master to read data from invalid memory locations, potentially leading to disclosure of sensitive information or software crashes.

Affected Version(s)

SOEM 0 < 2.0.1

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-26092...
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

f0rw4rd / quellsec.dev, alosafuzz, Brian Willows / graith.co.uk, Mayur Agnihotri
.