CyberRota Analysis
AI-GeneratedThe vulnerability exists in the GOOSE payload parser, which is susceptible to a boundary handling flaw that can be exploited by sending a single unauthenticated Layer 2 multicast frame. This flaw allows an attacker to manipulate the inner element length, leading to an out-of-bounds read that consistently crashes the subscriber process, causing a denial-of-service condition. Organizations utilizing systems that incorporate GOOSE protocol should prioritize addressing this vulnerability to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.