{"id":"CVE-2026-75346","published":"2026-10-09T16:17:29.590","lastModified":"2026-10-09T21:17:05.800","description":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/EIPStackGroup/OpENer","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipcommon.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipidentity.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/ciptypes.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/572","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/572","tags":[]}],"exploitRefs":[{"url":"https://github.com/EIPStackGroup/OpENer","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipcommon.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipidentity.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/ciptypes.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/572","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/572","tags":[]}],"hasPoc":true,"ai":{"summary":"An out-of-bounds read vulnerability in EIPStackGroup OpENer allows remote attackers to cause a denial of service by sending specially crafted CIP SetAttributeList requests to the server-side service. This flaw can lead to system instability and service disruption without requiring authentication or user interaction.","exploitability":"Exploitation is relatively straightforward as it requires only sending a malformed CIP SetAttributeList request over the network with no authentication needed, though the exact conditions for triggering the out-of-bounds read may require specific payload construction.","blast_radius":"The impact could affect industrial control systems using OpENer v2.3 or master branch, potentially causing widespread service disruption in SCADA and industrial automation environments where these devices are deployed.","remediation":"Upgrade to version 2.4 or later which contains the fix for this out-of-bounds read vulnerability in the CIP SetAttributeList service.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ics","denial-of-service","cipservice"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:01:19.180Z"}}