CVE-2026-75351

Summary

The flaw is an out-of-bounds read vulnerability in OpENer's EtherNet/IP ForwardOpen connection-path parser that allows remote attackers to trigger a denial of service condition. This means an attacker can crash the server without needing authentication or special privileges.

Exploitability

Exploitation is relatively straightforward as it requires only sending a malformed EtherNet/IP packet to the affected server, with no authentication needed and minimal preconditions required.

Blast radius

The impact could be significant in industrial control systems where OpENer is used for EtherNet/IP communication, potentially causing production line shutdowns or operational disruptions across connected devices.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpENer version 2.4 or later which contains the fix for this out-of-bounds read vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.