← Back to search

CVE-2026-75349

7.5 HIGHpublic exploit available

Published 2026-10-09 · Updated 2026-10-14

AI risk analysis

Summary
The EIPStackGroup OpENer v2.3.0 contains an out-of-bounds read vulnerability in its Connection Manager request parsing logic, which can be triggered by remote attackers to cause a denial of service condition.
Exploitability
Exploitation is relatively straightforward as it requires only sending a malformed Connection Manager request over the network with no authentication required, making it highly suitable for automated attacks.
Blast radius
The vulnerability could impact industrial control systems using this software, potentially causing widespread operational disruption across connected devices and processes that rely on the affected communication stack.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 2.3.1 or later to remediate the out-of-bounds read vulnerability in Connection Manager request parsing.
icsdenial-of-servicenetwork

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-400

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.