VULNERABILITY INTELLIGENCE
CVE-2026-82946
CVSS score6.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-10-26
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.
Weakness classification
- CWE-476: NULL Pointer Dereference
- CWE-690: Unchecked Return Value to NULL Pointer Dereference