Is CVE-2024-36980 actively exploited?

No active exploitation of CVE-2024-36980 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-36980 be exploited remotely?

Yes. CVE-2024-36980 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-36980?

CVE-2024-36980 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2024-36980

HIGH

CVE-2024-36980

CWE-125Published: September 18, 2024· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.This is the first instance of the incorrect comparison.

NVD Source

Technical Analysis

CVE-2024-36980 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.