Vulnerability Spotlight: DoS, code execution vulnerabilities in EIP Stack Group OpENer
Summary: Cisco Talos discovered two vulnerabilities in the Ethernet/IP server functionality of EIP Stack Group OpENer, an Ethernet/IP stack for I/O adapter devices, affecting version 2.3 and development commit 8c73bf3. One is a denial-of-service flaw (TALOS-2020-1143/CVE-2020-13530) triggered by a large number of network requests in a short span, and the other is an out-of-bounds write (TALOS-2020-1170/CVE-2020-13556) that a crafted series of requests can use to achieve remote code execution.
What you should know: An out-of-bounds write in an Ethernet/IP stack used to build ODVA-compliant I/O adapter products means a sequence of network requests can put remote code execution on industrial devices, and Talos confirmed both flaws in the current release and development commit.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13530CVE-2020-13556
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026