EUVD Vulnerability Catalog

EUVD-2026-109681

Severity: HIGH Base Score: 7.1 CVSS Version: 3.1

Vulnerability Description

SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers. The software uses length and offset values from device messages without validating them against buffer sizes. This can cause the master to access invalid memory locations, potentially disclosing sensitive information or causing crashes.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

▪ Attack Vector (AV): Adjacent Network

▪ Attack Complexity (AC): Low

▪ Privileges Required (PR): None

▪ User Interaction (UI): None

▪ Scope (S): Unchanged

▪ Confidentiality Impact (C): High

▪ Integrity Impact (I): None

▪ Availability Impact (A): Low

Affected Vendors & Systems

Vendor RT-Labs AB

References & Advisory Links

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-260921-01.pdf

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

ENISA

EPSS Probability

Known Aliases

GHSA-fq96-jx7g-9639 CVE-2026-82947

Published On

2026-10-26

Last Updated

2026-10-26