{"id":"CVE-2026-75347","published":"2026-10-09T17:16:48.403","lastModified":"2026-10-13T17:17:45.810","description":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/encap.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/ports/generic_networkhandler.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/575","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/575","tags":[]}],"exploitRefs":[{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/encap.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/blob/master/source/src/ports/generic_networkhandler.c","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/575","tags":[]},{"url":"https://github.com/EIPStackGroup/OpENer/issues/575","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability is an expired pointer dereference in EIPStackGroup OpENer's EtherNet/IP Common Packet Format handling, which can be triggered by remote attackers to cause a denial of service. This affects industrial control systems that use EtherNet/IP communication protocols.","exploitability":"Exploitation is relatively straightforward as it requires only sending specially crafted CPF packets to the vulnerable system, with no authentication needed and minimal preconditions.","blast_radius":"The impact could affect industrial automation systems, potentially causing production line shutdowns or operational disruptions in manufacturing environments that rely on EtherNet/IP communication.","remediation":"Upgrade to version 2.590 or later to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ics","dos","ethernet-ip"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:00:43.766Z"}}