CNNVD-202602-774 Information

CNNVD ID

CNNVD-202602-774

CVE-2026-1301

  • CNNVD Published: 2026-02-05

Description (Chinese)

o6 Automation Open62541是德国o6 Automation公司的一个工业自动化工具集。 o6 Automation Open62541存在缓冲区错误漏洞,该漏洞源于特制JSON消息可能导致解码器在身份验证前写入超出堆分配数组,可能导致进程崩溃和内存损坏。

Description (English)

O6 Automation Open 622541 is an industrial automation tool set of the German company O6 Automation. There is an error loophole in the buffer zone in Automation Open 62541, which stems from the unique JSON message that could lead to the decoding device writing in excess of the stack distribution group prior to identification, and could lead to process collapse and memory damage.

Hazard Level

High

Vulnerability Type

缓冲区错误

Affected Vendor

o6 Automation

Published

2026-02-05

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-036-03

Patch

https://github.com/open62541/open62541/releases

Share on: