Approved changes feed: RSS · Atom

cpe:2.3:a:cisa:icsnpp-ethercat:*:*:*:*:*:zeek:*:*

part: a version: * update: *

VendorCisa (4ccdc51d-6086-51ca-85a4-77a140f6b0c5)
ProductIcsnpp Ethercat (ec715741-1592-522f-937e-43fb1985f893)
Edition*
Language*
Software edition*
Target softwarezeek
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cisagov/icsnpp-ethercat purl2cpe 2026-06-01 10:12:43.949988

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7244 vulnerable 2026-06-08 06:21:57.385625 Ethercat Zeek Plugin Out-of-bounds Write
CRITICAL (9.8)
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution.
Published: 2024-03-01T20:14:27.469Z
Updated: 2024-08-05T13:13:35.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7243 vulnerable 2026-06-08 06:21:57.385058 Ethercat Zeek Plugin Out-of-bounds Write
CRITICAL (9.8)
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution.
Published: 2024-03-01T20:16:06.673Z
Updated: 2024-08-02T08:57:35.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7242 vulnerable 2026-06-08 06:21:57.383258 Ethercat Zeek Plugin Out-of-bounds Read
HIGH (8.2)
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory.
Published: 2024-03-01T20:17:51.283Z
Updated: 2024-08-02T08:57:35.466Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.