Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-82945— Memory Corruption via FMMU Configuration Table Overflow

Quick assessment

Affected

RT-Labs AB SOEM

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SOEM 2.0.0 及更早版本在设备配置过程中存在漏洞：恶意设备可引发内存损坏。该软件在将配置数据写入固定大小数组时，未检查数组索引是否超出其最大容量（即 EC_MAXFMMU 条目数）。若设备提供超过 EC_MAXFMMU 个配置块，将导致写入操作越界，进而破坏相邻内存结构，并可能干扰后续操作。

CVSS 6.5 · Medium Updated Oct 26, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Memory Corruption via FMMU Configuration Table Overflow

Source: CVE Program / CVE List V5

Vulnerability Description

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index exceeds its maximum size of EC_MAXFMMU entries. A device presenting more than EC_MAXFMMU configuration blocks can force writes beyond the array boundary, corrupting adjacent memory structures and potentially disrupting subsequent operations.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
RT-Labs AB	SOEM	0 ~ 2.0.1	-

II. Public POCs for CVE-2026-82945

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-82945

请登录查看更多情报信息。

Other References for CVE-2026-82945 (1)

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-82945

Same Patch Batch · RT-Labs AB · 2026-10-26 · 6 CVEs total

CVE-2026-82944	8.8 HIGH	Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
CVE-2026-70388	8.3 HIGH	Memory Corruption via Integer Underflow in Message Length Validation
CVE-2026-82947	7.1 HIGH	Multiple Out-of-Bounds Reads in Frame Processing
CVE-2026-82943	6.5 MEDIUM	Out-of-Bounds Read via Unchecked Length Values
CVE-2026-82946	6.5 MEDIUM	Null Pointer Dereference in Mailbox Error Handling

IV. Related Vulnerabilities

Same product: SOEM

Same vendor: RT-Labs AB

Same weakness: CWE-787