CVE-2024-39590: openplcproject openplc v3 firmware

csirt@kutim:~/threat-intel/cve/CVE-2024-39590

CVSS 7.5 · High EPSS 1,0%

Kerentanan Incorrect Type Conversion or Cast pada openplcproject openplc v3 firmware. Skor CVSS 3.1 7.5 (High) menurut cisco.com.

Deskripsi (NVD)

Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Write_Reply` function

Rincian

Terbit di NVD: 18 September 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-704: Incorrect Type Conversion or Cast
EPSS (30 hari): 1,0% peluang dieksploitasi; lebih tinggi dari 62,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
openplcproject	openplc v3 firmware	Versi 2024-05-28

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2016 exploit · advisory pihak ketiga
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2016

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.