CVE-2026-75348CWE-125

CVE-2026-75348

High · published October 9, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00505 · 42.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-10-09T20:17Z
References (5)
https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c · [email protected]https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/encap.c · [email protected]https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c · [email protected]https://github.com/EIPStackGroup/OpENer/issues/573 · [email protected]https://github.com/EIPStackGroup/OpENer/issues/573 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 11 OCT 03:31Z
    EPSS moved — → 1%
    epss
  • 09 OCT 00:00Z
    An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format…
    cvelistv5
  • 09 OCT 00:00Z
    An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format…
    cvelistv5