CVE-2026-70388High· 8.3▾ TwilightSOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowing negative or extremely large values to bypass safety checks. This can corrupt memory and potentially allow an attacker to execute arbitrary code on the master system.
SOEM < 2.0.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82947High· 7.1Multiple Out-of-Bounds Reads in Frame Processing
CVE-2026-82943Medium· 6.5Out-of-Bounds Read via Unchecked Length Values
CVE-2026-82944High· 8.8Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers
CVE-2026-82945Medium· 6.5Memory Corruption via FMMU Configuration Table Overflow
CVE-2026-82946Medium· 6.5Null Pointer Dereference in Mailbox Error Handling
CVE-2020-6096High· 8.1An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000