CVE-2026-51537

Published: Jul 13, 2026Modified: Jul 15, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (3)

https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e

Source: cve@mitre.org

https://github.com/EIPStackGroup/OpENer/issues/564

Source: cve@mitre.org

https://github.com/EIPStackGroup/OpENer/issues/564

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.