CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write
An attacker can cause a denial-of-service condition in Pyramid Solutions EtherNet/IP kits by sending a specially crafted packet that triggers an out-of-bounds write.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-1737?
CVE-2022-1737 is a critical memory corruption vulnerability in Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA), published on 12 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition.
Weakness: CWE-787
Which versions are affected by CVE-2022-1737?
It affects 4 products.
Products include Pyramidsolutions Netstax Ethernet\/Ip Adapter Development Kit, Pyramidsolutions Netstax Ethernet\/Ip Adapter Dll Kit, Pyramidsolutions Netstax Ethernet\/Ip Scanner Development Kit, Pyramidsolutions Netstax Ethernet\/Ip Scanner Dll Kit.
How do I fix CVE-2022-1737?
No fix has been published for CVE-2022-1737 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-1737 being exploited?
There is no known exploitation of CVE-2022-1737 in the wild and no public exploit code.
Sources
Also known as GHSA-cfph-pp77-pjq8.