Uploaded image for project: 'PROFINET IO-Device V4'
  1. PROFINET IO-Device V4
  2. PSPNSV4-1534

Firmware crash on connect with long input data

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: V4.4.0.0, V4.5.0.0, V4.6.0.0, V4.7.0.0, V4.8.0.0
    • Fix Version/s: V4.8.0.2, V4.8.1.0
    • Labels:
      None
    • Account:
      SPC Profinet Slave (SPCPROFINE)

      Description

      When a controller connects with the device and tries to use 1437 to 1440 byte output data length a memory corruption occurs. This may result in unexpected firmware behavior including firmware crash.

      If a device application supports shared device function and not all AR resources are in use by Profinet IO Controller in the current configuration, an attacker may send a corresponding Connect.req service to the device and cause a malfunction.

        Attachments

          Issue Links

            Expenses

              Activity

                Status Description

                  People

                  • Reporter:
                    AMesser Andreas Messer
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: