SOEM (<= 2.0.0)

The Simple Open EtherCAT Master (SOEM) library version 2.0.0 and earlier fails to validate length and offset fields in device messages, allowing a malicious device to trigger out-of-bounds memory reads.

SOEM version 2.0.0 and earlier is vulnerable to a memory buffer overflow during multi-segment data transfers due to a failure to track cumulative data size.

SOEM version 2.0.0 and earlier contains an out-of-bounds memory access vulnerability due to improper arithmetic validation, allowing a network-adjacent attacker to trigger memory corruption and potential arbitrary code execution.