OpenEtherCATsociety - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/openethercatsociety/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 09:41:24 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSOEM: Out-of-bounds memory read vulnerability (CVE-2026-82947)https://feed.craftedsignal.io/briefs/2026-10-soem-memory-safety/Mon, 26 Oct 2026 09:41:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-soem-memory-safety/The Simple Open EtherCAT Master (SOEM) library version 2.0.0 and earlier fails to validate length and offset fields in device messages, allowing a malicious device to trigger out-of-bounds memory reads.CVE-2026-82947 involves a memory safety vulnerability in the SOEM frame processing logic. An attacker-controlled device can provide manipulated length and offset values within EtherCAT messages. Because the master does not validate these inputs against allocated buffer sizes, it performs out-of-bounds reads. This flaw can lead to sensitive information disclosure or a denial-of-service condition via application crashes.

Impact

Successful exploitation may result in the disclosure of memory contents to an attacker or an unexpected crash of the master process.

Recommendation

Identify systems utilizing the SOEM library version 2.0.0 or earlier. Monitor for unusual application crashes or logs indicative of memory access violations in the EtherCAT master service. Upgrade to a patched version once released by the maintainers.

]]>highadvisoryvulnerabilitymemory-safetyindustrial-control-systems