CVE-2026-75345

Summary

OpENer v2.3.0 contains an out-of-bounds read vulnerability in its unconnected explicit messaging path that can be exploited by remote attackers to cause a denial of service. This flaw occurs when processing certain network messages and allows an attacker to read memory beyond allocated bounds, potentially leading to system instability.

Exploitability

The exploit is relatively straightforward as it requires only sending specially crafted network messages to the affected OpENer service, with no authentication required for exploitation.

Blast radius

In industrial control systems using OpENer, this vulnerability could lead to widespread service disruption across connected devices and processes, particularly in environments where unconnected explicit messaging is actively used.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpENer version 2.3.1 or later to address this out-of-bounds read vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.