by Kastro
Paper/Archive/CVE-2026-51537

CVE-2026-51537

mitre — EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when p…

EPSS 0.6%public exploitCVSS 9.1
critical.is priorityof 100
48
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 51.1.511 × 2010.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/EIPStackGroup/OpENer/issues/564refgist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e