CVE-2026-51541 is an out-of-bounds read issue in OpENer 2.3.0 (commit 76b95cf) when handling malformed explicit requests with a forged EPath size in CIP message parsing. An attacker can send a valid ENIP SendRRData frame with a short CIP payload, claiming more path words are present than available, causing the parser to read beyond the stack receive buffer. This vulnerability exists in the CIP message par [truncated]
OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData). This vulnerability has a high impact on the affected systems, and users should be aware of this issue and take necessary precautions. The vulnerability is caused by an integer underflow in the processing of conne [truncated]
CVE-2026-51538 is an Incorrect Access Control vulnerability in EIPStackGroup OpENer 2.3.0 (commit 76b95cf). The vulnerability allows an attacker to bypass access controls using a valid session handle created by another legitimate client. This could lead to unauthorized access and potential exploitation of the affected system. Network administrators and security teams responsible for EIPStackGroup OpENer 2 [truncated]
CVE-2026-51537 OpENer 2.3.0 has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue affects OpENer 2.3.0 (commit 76b95cf) and may [truncated]
CVE-2026-51536 is a Stack Buffer Overflow vulnerability in OpENer 2.3.0. The issue arises from inconsistent integer typing when parsing CIP network packets. A maliciously crafted packet can cause a length parameter overflow or truncation, leading to a Stack Buffer Overflow. This vulnerability has a high potential impact due to the possibility of remote code execution. Organizations using OpENer 2.3.0 shou [truncated]
A medium-severity out-of-bounds read vulnerability exists in OpENer v2.3-558-g1e99582, an open-source EtherNet/IP stack implementation. The flaw resides in the Common Packet Format (CPF) parser within `CreateCommonPacketFormatStructure()` in `source/src/enet_encap/cpf.c`. An attacker can craft a malicious ENIP/CPF message with a manipulated `item_count` value that is not consistently validated against the [truncated]
