CVE-2026-75348

Summary

An out-of-bounds read vulnerability in EIPStackGroup OpENer allows remote attackers to cause a denial of service by sending specially crafted EtherNet/IP TCP packets that don't properly validate socket address information structures. This means an attacker can crash the application without needing any authentication or special privileges.

Exploitability

The exploit is relatively straightforward to execute as it requires only sending malformed TCP packets to the EtherNet/IP service, with no authentication needed and minimal preconditions required.

Blast radius

If exploited, this vulnerability could cause widespread disruption in industrial control systems that rely on OpENer for EtherNet/IP communication, potentially leading to production line shutdowns or operational failures.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.5 or later to address this out-of-bounds read vulnerability in the Common Packet Format parser.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.