MEDIUMCVSS v3.1 6.5Vulnerability

CVE-2026-82943

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An attacker can exploit this to extract up to 64KB of data from the master's memory.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-26T11:05:33.130612+00:00
Cvss score
6.5
Cvss severity
MEDIUM
Retrieved at
2026-10-26T11:07:52+00:00
Score
6.5
Last source
NVD
Cvss version
3.1
Cve id
CVE-2026-82943
Cvss vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
First seen by Signal
2026-10-26T11:03:13+00:00
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published at
2026-10-26T09:16:36.023
Last modified
2026-10-26T09:16:36.023

Related Entities (3)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-82943 (CVSS v3.1 6.5) — Ninja Signal Threat Intelligence | Ninja Signal