A vulnerability in SOEM version 2.0.0 and earlier allows a malicious device to cause the master to read data outside allocated buffers, potentially disclosing sensitive information or causing crashes. The software fails to validate length and offset values from device messages against buffer sizes, leading to access of invalid memory locations. This issue arises from inadequate validation of device messag [truncated]
A vulnerability in SOEM version 2.0.0 and earlier allows a malicious device to overflow memory buffers during multi-segment data transfers. The software only checks the total size at the beginning and doesn't track cumulative size as multiple segments arrive. An attacker can declare a small initial size to pass validation, then send additional segments that exceed the allocated buffer, potentially enablin [truncated]
