CVE-2026-51537CWE-125

CVE-2026-51537

Critical · published July 14, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-14T02:16Z
Affected products (1)
ProductVersionsFixed in
opener_project/openerall versions—
References (3)
https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e · [email protected]https://github.com/EIPStackGroup/OpENer/issues/564 · [email protected]https://github.com/EIPStackGroup/OpENer/issues/564 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 13 JUL 00:00Z
    EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short…
    cvelistv5