CVEvulnerability

CVE-2026-70388

8.3 HIGH Published 2026-10-26 Modified 2026-10-26 Official page ↗
Status
Awaiting Analysis
Published
2026-10-26
Last modified
2026-10-26
Assigner
a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CVSS 3.1 (a6d3dc9e-0591-4a13-bce7-0f5b31ff6158)
8.3 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Weaknesses
CWE-191, CWE-195, CWE-787

Description

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowing negative or extremely large values to bypass safety checks. This can corrupt memory and potentially allow an attacker to execute arbitrary code on the master system.

Related

Weakness · CWE (3)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness
  • CWE-195 Signed to Unsigned Conversion Error weakness
  • CWE-787 Out-of-bounds Write weakness

References