CVE-2026-75345 Details
Description
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service.
A stack-based buffer overflow vulnerability has been identified in OpENer version 2.3.0, specifically in commit 76b95cf. The issue arises within the unconnected explicit messaging path, where improper validation of request data length allows for an out-of-bounds read. This vulnerability can be exploited by a remote attacker, leading to a denial-of-service condition by causing the application to crash.
OpENer users are advised to restrict EtherNet/IP traffic to trusted networks until a patched version is available.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/EIPStackGroup/OpENer/issues/569 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/EIPStackGroup/OpENer/blob/76b95cf/source/src/cip/cipcommon.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/76b95cf/source/src/cip/cipmessagerouter.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/76b95cf/source/src/cip/ciptcpipinterface.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/76b95cf/source/src/enet_encap/endianconv.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/issues/569 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/EIPStackGroup/OpENer/tree/76b95cf | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| EIPStackGroup OpENer | >= 2.3, <= 2.3.0-76b95cf |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | [email protected] |