Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-82947— Multiple Out-of-Bounds Reads in Frame Processing

Quick assessment

Affected
RT-Labs AB SOEM
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SOEM 2.0.0 及更早版本在帧处理过程中存在多个漏洞，恶意设备可利用这些漏洞诱导主站读取超出已分配缓冲区范围的数据。该软件直接使用设备消息中的长度和偏移量值，而未将其与缓冲区大小进行验证。这可能导致主站访问无效的内存位置，从而泄露敏感信息或引发系统崩溃。

CVSS 7.1 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-82947

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Multiple Out-of-Bounds Reads in Frame Processing
Source: CVE Program / CVE List V5
Vulnerability Description
SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
RT-Labs AB SOEM 0 ~ 2.0.1 -

II. Public POCs for CVE-2026-82947

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-82947

请登录查看更多情报信息。

Other References for CVE-2026-82947 (1)

Same Patch Batch · RT-Labs AB · 2026-10-26 · 6 CVEs total

CVE-2026-82944 8.8 HIGH Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
CVE-2026-70388 8.3 HIGH Memory Corruption via Integer Underflow in Message Length Validation
CVE-2026-82945 6.5 MEDIUM Memory Corruption via FMMU Configuration Table Overflow
CVE-2026-82943 6.5 MEDIUM Out-of-Bounds Read via Unchecked Length Values
CVE-2026-82946 6.5 MEDIUM Null Pointer Dereference in Mailbox Error Handling

IV. Related Vulnerabilities

Same product: SOEM
Same vendor: RT-Labs AB
Same weakness: CWE-125