This vulnerability in liftoff-sr CIPster up to commit e8e9dba09bf56962807d3504b783ccdb6287f3e4 involves an out-of-bounds write in the BufWriter::append function within the EtherNet IP Message Handler component. The issue arises from improper memory handling during message processing, enabling remote attackers to write outside intended memory bounds. The product follows a rolling release approach, so no fixed version numbers are provided. A patch commit 3a0159ed43125dcd024a1965f0289cb186bae9ff addresses the vulnerability. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

The vulnerability allows remote attackers to perform out-of-bounds writes, which can lead to memory corruption. This may result in denial of service or potentially arbitrary code execution depending on the exploitation context. The CVSS score of 6.9 reflects a medium severity with network attack vector and no required privileges or user interaction. The impact on confidentiality, integrity, and availability is low to limited but still significant enough to warrant patching.

A patch identified by commit 3a0159ed43125dcd024a1965f0289cb186bae9ff is recommended to fix this vulnerability. Since the product uses a rolling release model, users should update to the latest version that includes this patch. Patch status is not explicitly confirmed beyond this recommendation; therefore, users should verify with the vendor or project repository for the current remediation status and apply the patch accordingly.