CVE-2022-1737CWE-787

Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Critical · published July 12, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

🚨 An unauthorized attacker can crash your whole system with a crafted packet! This out-of-bounds write vulnerability in Pyramid Solutions' Developer and DLL kits is a game changer. 🔥 Think of it like a sneaky delivery person who manages to jam a package into a mail slot that's too small, causing a backup that clogs up the whole postal system. This oversight disrupts everything, just like how this vulnerability can paralyze your operations! If exploited, an attacker could send a malicious packet that causes a denial-of-service condition. This means your EtherNet/IP Adapter and Scanner could go down, leaving your systems vulnerable and potentially halting critical operations—absolutely devastating for any industrial environment!

Put simply

Think of it like a sneaky delivery person who manages to jam a package into a mail slot that's too small, causing a backup that clogs up the whole postal system. This oversight disrupts everything, just like how this vulnerability can paralyze your operations! This vulnerability allows an unauthorized attacker to perform an out-of-bounds write, which can disrupt the normal functioning of the affected products leading to a system crash. Essentially, it’s like a glitch in the system that can be triggered with specific packets.

What to do

If exploited, an attacker could send a malicious packet that causes a denial-of-service condition. This means your EtherNet/IP Adapter and Scanner could go down, leaving your systems vulnerable and potentially halting critical operations—absolutely devastating for any industrial environment! To protect yourself, immediately patch to the latest version of the Developer and DLL kits. Ensure you are monitoring network traffic for any suspicious packets that may attempt to exploit this flaw. Don’t wait—secure your systems now! You've got this! With a quick patch and vigilant monitoring, your systems will be back on track in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01256 · 69.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-07-12T20:41Z
EPSS history
Timeline
  • 12 JUL 20:41Z
    Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write
    cvelistv5