CVE-2026-75352

Summary

A remote attacker can trigger an integer underflow in OpENer's EtherNet/IP ForwardOpen connection parser, leading to a denial of service condition. This vulnerability allows attackers to crash the server without requiring authentication or user interaction.

Exploitability

Exploitation is relatively straightforward as it requires only sending a specially crafted EtherNet/IP packet to the vulnerable server, with no authentication or user interaction needed.

Blast radius

The impact could affect industrial control systems and IoT devices using OpENer v2.3 that are exposed to untrusted networks, potentially causing operational disruptions in critical infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpENer version 2.4 or later to address this integer underflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.