EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.
References
| Link | Resource |
|---|---|
| https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e | Third Party Advisory |
| https://github.com/EIPStackGroup/OpENer/issues/564 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/EIPStackGroup/OpENer/issues/564 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
11 Aug 2026, 16:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:opener_project:opener:2.3.0:*:*:*:*:*:*:* | |
| First Time |
Opener Project opener
Opener Project |
|
| References | () https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e - Third Party Advisory | |
| References | () https://github.com/EIPStackGroup/OpENer/issues/564 - Exploit, Issue Tracking, Vendor Advisory |
14 Jul 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| CWE | CWE-125 | |
| References | () https://github.com/EIPStackGroup/OpENer/issues/564 - |
13 Jul 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-13 22:16
Updated : 2026-08-11 16:42
NVD link : CVE-2026-51537
Mitre link : CVE-2026-51537
CVE.ORG link : CVE-2026-51537
JSON object : View
Products Affected
opener_project
- opener
CWE
CWE-125
Out-of-bounds Read