CVE-2026-82946: fallo de gravedad media en RT-Labs AB SOEM
Null Pointer Dereference in Mailbox Error Handling
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 0.2%
SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
RT-Labs AB · SOEMCVEs relacionadas — RT-Labs AB SOEM
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-70388HIGHMemory Corruption via Integer Underflow in Message Length ValidationEPSS 0.2%CVE-2026-82944HIGHBuffer Overflow in CoE SDO Upload Multi-Segment Data TransfersEPSS 0.2%CVE-2026-82947HIGHMultiple Out-of-Bounds Reads in Frame ProcessingEPSS 0.2%CVE-2026-82945MEDIUMMemory Corruption via FMMU Configuration Table OverflowEPSS 0.2%CVE-2026-82943MEDIUMOut-of-Bounds Read via Unchecked Length ValuesEPSS 0.2%