CVE-2023-7242— Ethercat Zeek Plugin Out-of-bounds Read
Quick assessment
Affected
CISA Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin是Zeek开源的一个 Zeek 插件。 Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin d78dda6及之前版本存在安全漏洞，该漏洞源于容易受到越界读取影响，可能允许攻击者使进程崩溃并泄漏数据。
Possible ATT&CK Techniques 1 AI
T1207 · Rogue Domain Controller
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-7242
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ethercat Zeek Plugin Out-of-bounds Read
Source: CVE Program / CVE List V5
Vulnerability Description
Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat
Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds
read during the process of analyzing a specific Ethercat packet. This
could allow an attacker to crash the Zeek process and leak some
information in memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin是Zeek开源的一个 Zeek 插件。 Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin d78dda6及之前版本存在安全漏洞，该漏洞源于容易受到越界读取影响，可能允许攻击者使进程崩溃并泄漏数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| CISA | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek | 0 ~ d78dda6 | - |
|
II. Public POCs for CVE-2023-7242
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-7242
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-7242 (1)
Same Patch Batch · CISA · 2024-03-01 · 3 CVEs total
| CVE-2023-7243 | 9.8 CRITICAL | Ethercat Zeek Plugin Out-of-bounds Write |
| CVE-2023-7244 | 9.8 CRITICAL | Ethercat Zeek Plugin Out-of-bounds Write |
IV. Related Vulnerabilities
Same vendor: CISA
-
CVE-2026-43510
CISA manage.get.gov insecure portfolio administrative privil -
CVE-2025-67634
Software Acquisition Guide Supplier Response Web Tool XSS -
CVE-2025-35436
CISA Thorium account verification email error handling -
CVE-2025-35435
CISA Thorium download stream divide by zero -
CVE-2025-35434
CISA Thorium does not validate TLS connections to Elasticsea
V. Comments for CVE-2023-7242
No comments yet