OpenPLC Project OpenPLC v3 Firmware 2024-04-04
Approved changes feed: RSS · Atom
cpe:2.3:o:openplcproject:openplc_v3_firmware:2024-04-04:*:*:*:*:*:*:*
part: o version: 2024-04-04 update: *
| Vendor | Openplcproject (65aa9aa3-a458-530b-911b-aa9e54bd32e6) |
|---|---|
| Product | Openplc V3 Firmware (062037af-7da7-517b-90e8-4f20fd9e3646) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/thiagoralves/openplc_v3 |
purl2cpe | 2026-06-01 10:11:41.475615 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-36981 |
vulnerable | 2026-06-08 06:39:45.984399 |
Details available
HIGH (7.5)
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the final instance of the incorrect comparison.
Published: 2024-09-18T14:35:55.783Z
Updated: 2025-11-04T16:12:22.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36980 |
vulnerable | 2026-06-08 06:39:45.983632 |
Details available
HIGH (7.5)
An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the first instance of the incorrect comparison.
Published: 2024-09-18T14:35:55.669Z
Updated: 2025-11-04T16:12:21.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34026 |
vulnerable | 2026-06-08 06:37:32.535363 |
Details available
CRITICAL (9)
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Published: 2024-09-18T14:35:55.073Z
Updated: 2024-09-18T18:23:23.132Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.