CVE-2026-75346 Details
Description
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service
A vulnerability allowing out-of-bounds read has been identified in EIPStackGroup OpENer version 2.3 and the master branch prior to commit 76b95cf. This vulnerability occurs in the server-side CIP SetAttributeList service, where the function improperly handles non-settable attributes, leading to a stack-buffer-overflow. A remote attacker can exploit this issue, causing a denial-of-service condition.
It is recommended to update to a version of OpENer that includes the fix for this vulnerability. The fix involves modifying the 'SetAttributeList' function to properly validate the remaining length of incoming data before processing variable-length attributes.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/EIPStackGroup/OpENer/issues/572 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/EIPStackGroup/OpENer | [email protected] | Vendor |
| https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipcommon.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipidentity.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/ciptypes.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c | [email protected] | Source CodeVendor |
| https://github.com/EIPStackGroup/OpENer/issues/572 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| EIPStackGroup OpENer | 2.3 ~master |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 9, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | [email protected] |