Zack Wheeler is entering the final year of his five-year, $118 million contract.
February 2024
The No. 1 fantasy baseball draft target per category in 2024
Jorge Martin projects which players will lead MLB in the offensive and pitching categories this season.
Biden-Harris Administration Announces $500 Million to Confront the Wildfire Crisis as Part of Investing in America Agenda
SAN DIEGO, Feb. 20, 2024 — Today, Agriculture Secretary Tom Vilsack announced that the Biden-Harris Administration is investing nearly $500 million from President Biden’s Investing in America agenda to expand work on the USDA Forest Service’s Wildfire Crisis Strategy to reduce risk to communities, critical infrastructure and natural resources from the nation’s ongoing wildfire crisis, which is exacerbated by climate change.
2024 NBA Mock Draft 5.0: Will another French prospect be the No. 1 overall pick?
Here’s an updated look at Yahoo Sports’ first-round projections for the 2024 NBA Draft.
Mock Draft 5.0: International players dominate early picks
With no consensus No. 1 pick playing in college, half of the lottery projects to be made up of prospects who are playing overseas or for the G League.
The 5 best non-Shohei Ohtani moves of the MLB offseason — and 4 that should happen before Opening Day
Spring training games begin this week, but several top free agents still need a team.
The 5 best moves of the MLB offseason (excluding Ohtani)
New national MLB insider Russell Dorsey looks at five offseason moves that we’ll be talking about when the games begin, plus four looming moves.
Are You Richer Than You Think? A Surprising Number Of People Consider Themselves ‘Poor’ But They’re Actually In The Top 10% Of Earners
People Are Sharing Their Wildest Stories About *That One Coworker*, And They Range From Horrifying To Completely Unhinged
Ethercat Zeek Plugin
1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: CISA
- Equipment: Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Plugin for Zeek
- Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read
2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow remote code execution.
3. TECHNICAL DETAILS
3.1 AFFECTED PRODUCTS
The following GitHub commits (versions) of ICSNPP – Ethercat Plugin, a plugin for Zeek, are affected:
- Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Zeek Plugin: versions d78dda6 and prior
3.2 Vulnerability Overview
3.2.1 OUT-OF-BOUNDS WRITE CWE-787
Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution.
CVE-2023-7244 has been assigned to this vulnerability. A CVSS v3.1 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
3.2.2 OUT-OF-BOUNDS WRITE CWE-787
Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution.
CVE-2023-7243 has been assigned to this vulnerability. A CVSS v3.1 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
3.2.3 OUT-OF-BOUNDS READ CWE-125
Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory.
CVE-2023-7242 has been assigned to this vulnerability. A CVSS v3.1 base score of 8.2 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
3.3 BACKGROUND
- CRITICAL INFRASTRUCTURE SECTORS: Multiple
- COUNTRIES/AREAS DEPLOYED: Worldwide
- COMPANY HEADQUARTERS LOCATION: United States
3.4 RESEARCHER
Cameron Whitehead of HACK@UCF reported these vulnerabilities to CISA.
4. MITIGATIONS
CISA recommends that users update Industrial Control Systems Network Protocol Parsers (ICSNPP) – Ethercat Zeek Plugin to commit 3bca34c or later.
To help reduce successful exploitation, users are encouraged to keep critical software updates and patches up to date in their system networks.
CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:
- Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
- Locate control system networks and remote devices behind firewalls and isolating them from business networks.
- When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B–Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
5. UPDATE HISTORY
- February 20, 2024: Initial Publication