CVE-2026-75346

Summary

An out-of-bounds read vulnerability in EIPStackGroup OpENer allows remote attackers to cause a denial of service by sending specially crafted CIP SetAttributeList requests to the server-side service. This flaw can lead to system instability and service disruption without requiring authentication or user interaction.

Exploitability

Exploitation is relatively straightforward as it requires only sending a malformed CIP SetAttributeList request over the network with no authentication needed, though the exact conditions for triggering the out-of-bounds read may require specific payload construction.

Blast radius

The impact could affect industrial control systems using OpENer v2.3 or master branch, potentially causing widespread service disruption in SCADA and industrial automation environments where these devices are deployed.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.4 or later which contains the fix for this out-of-bounds read vulnerability in the CIP SetAttributeList service.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.