CVE-2021-27498

Published: May 12, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.

Affected (1)

Products: Opener Project: Opener

Opener Project

1 product

Opener

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opener Project Opener	Up to 2.3

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (4)

https://github.com/EIPStackGroup/OpENer

Source: ics-cert@hq.dhs.gov

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://github.com/EIPStackGroup/OpENer

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.