CVE-2026-75346
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a deni
n/a n/a
CVSS
7.5HighExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 9 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.54%Chance of exploitation activity in the next 30 days, higher than 44% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service
Text from CVE List
Affected versions 1
- n/aaffected: n/aCVE List
References 6
- github.com/EIPStackGroup/OpENer/issues/572Exploitvia CVE List
- github.com/EIPStackGroup/OpENerReferencevia CVE List
- github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipcommon.cReferencevia CVE List
- github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/ciptypes.cReferencevia CVE List
- github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/endianconv.cReferencevia CVE List
- github.com/EIPStackGroup/OpENer/blob/master/source/src/cip/cipidentity.cReferencevia CVE List