CVE-2026-82943

MediumCVSS 6.5/10Last modified Oct 26, 2026

Description

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An attacker can exploit this to extract up to 64KB of data from the master's memory.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125 CWE-195 CWE-200

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
RT-Labs AB	SOEM	< 2.0.1

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf

Timeline

Published: Oct 26, 2026
Last modified: Oct 26, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-829448.8SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers CVE-2026-829456.5SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. Th CVE-2026-829466.5SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an CVE-2026-829477.1SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read d CVE-2026-82956.9An integer overflow vulnerability in the simdjson document-builder API allows incorrect buffer size calculations in "string_builder::escape_CVE-2026-829535.3NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to c CVE-2026-829549.9A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/s CVE-2026-829559.0In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Ga CVE-2026-829567.6Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ajax.AjaxNewWindowNotifyingBehavior notices CVE-2026-829577.3A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file inter CVE-2026-829587.6In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by CVE-2026-82965.6In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.