CVE-2024-34026

The vulnerability results from a stack-based buffer overflow (CWE-121, CWE-787) in the component responsible for parsing the EtherNet/IP protocol in OpenPLC Runtime. An attacker sends a series of specially crafted EtherNet/IP requests that cause data to be written beyond the boundaries of the allocated stack buffer. This leads to corruption of the process memory and consequently to arbitrary code execution on the vulnerable device. The attack is possible remotely without the need to possess any access credentials.

Successful exploitation of the vulnerability enables an attacker to execute code remotely (RCE) with the privilege level of the OpenPLC Runtime process, which can lead to complete system takeover, breach of data confidentiality and integrity, and disruption of the availability of the controlled industrial process.

Patches available from the manufacturer should be applied according to the references. Additionally, it is recommended to restrict network access to the EtherNet/IP interface only to trusted hosts using a firewall and to segment the OT/ICS network by separating PLC controllers from corporate networks and the Internet.

OpenPLC V3 Runtime — specifically commit b4702061dc14d1024856f71b4543298d77007b88 of the Openplcproject project