← Back

CVE-2026-51537

nvd nist
Published: Jul 13, 2026Modified: Aug 11, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Affected (1)

Opener Project
1 product
Opener
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Opener
Version 2.3.0

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (3)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitIssue TrackingVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.