Epics Base
Monthly
Out-of-bounds read in EPICS Base 7.0.10 and earlier lets a remote, unauthenticated attacker who can deliver a crafted message to an EPICS network service (Channel Access or PV Access) make the process read past the end of an allocated buffer, primarily crashing the service and potentially exposing adjacent memory. Affected deployments are typically control-system middleware on segmented or air-gapped facility networks, so real-world reachability depends on whether the protocol port is exposed to the attacker; default builds of all versions up to and including 7.0.10 are in scope. No public exploit was identified at time of analysis, and the vendor/coordinator advisory is ICSA-26-300-01; priority is this_week rather than emergency response.
Out-of-bounds read in EPICS Base 7.0.10 and prior allows unauthenticated remote attackers to crash or degrade an affected IOC/server and potentially disclose adjacent memory contents by sending a crafted network message with insufficiently validated element or length values. The issue is rated high availability impact with limited confidentiality exposure, and no public exploit was identified at time of analysis. Exploitation depends on reaching an EPICS Base service across the network, which in typical deployments sits on segmented control or OT networks.
High-severity integer overflow in EPICS Base 7.0.10 and earlier can be reached over the network without authentication or user interaction when a crafted EPICS protocol message carries a length value that is not properly validated. The resulting out-of-bounds memory write can destabilize or crash the affected process, producing denial of service; no public exploit has been identified at time of analysis, and CISA KEV does not list this CVE.
Remote memory corruption and denial of service in EPICS Base 7.0.10 and prior can be triggered by a remote, unauthenticated integer overflow in network request processing, which causes an undersized allocation before attacker-supplied data is handled; remote code execution is described by the vendor as potential rather than confirmed. Exploitation requires network reachability to a listening EPICS Base service on the affected request path, and EPICS is often deployed on segmented control or experiment networks, which limits exposure but does not protect reachable services. No public exploit was identified at time of analysis, and the vuln.today decision label is act_now.
Out-of-bounds read in EPICS Base 7.0.10 and earlier lets a remote, unauthenticated attacker who can deliver a crafted message to an EPICS network service (Channel Access or PV Access) make the process read past the end of an allocated buffer, primarily crashing the service and potentially exposing adjacent memory. Affected deployments are typically control-system middleware on segmented or air-gapped facility networks, so real-world reachability depends on whether the protocol port is exposed to the attacker; default builds of all versions up to and including 7.0.10 are in scope. No public exploit was identified at time of analysis, and the vendor/coordinator advisory is ICSA-26-300-01; priority is this_week rather than emergency response.
Out-of-bounds read in EPICS Base 7.0.10 and prior allows unauthenticated remote attackers to crash or degrade an affected IOC/server and potentially disclose adjacent memory contents by sending a crafted network message with insufficiently validated element or length values. The issue is rated high availability impact with limited confidentiality exposure, and no public exploit was identified at time of analysis. Exploitation depends on reaching an EPICS Base service across the network, which in typical deployments sits on segmented control or OT networks.
High-severity integer overflow in EPICS Base 7.0.10 and earlier can be reached over the network without authentication or user interaction when a crafted EPICS protocol message carries a length value that is not properly validated. The resulting out-of-bounds memory write can destabilize or crash the affected process, producing denial of service; no public exploit has been identified at time of analysis, and CISA KEV does not list this CVE.
Remote memory corruption and denial of service in EPICS Base 7.0.10 and prior can be triggered by a remote, unauthenticated integer overflow in network request processing, which causes an undersized allocation before attacker-supplied data is handled; remote code execution is described by the vendor as potential rather than confirmed. Exploitation requires network reachability to a listening EPICS Base service on the affected request path, and EPICS is often deployed on segmented control or experiment networks, which limits exposure but does not protect reachable services. No public exploit was identified at time of analysis, and the vuln.today decision label is act_now.