Eclipse 4diac FORTE versions 3.0.0 to 3.1.0 contain a use-after-free vulnerability (CWE-416) triggered by a specially crafted DELETE connection command sent to the management interface. This leads to a dangling pointer condition, enabling subsequent commands to access memory that has already been freed. The vulnerability has a CVSS 4.0 base score of 5.2, indicating medium severity. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to cause memory corruption by accessing freed memory, potentially leading to application instability or unexpected behavior. The CVSS vector indicates that the attack requires adjacent network access with low complexity and no privileges or user interaction, but the impact on confidentiality and availability is high. However, no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently available, users should monitor Eclipse Foundation advisories for updates. Until a patch is released, restricting access to the management interface to trusted users and networks may reduce exposure.