CVE-2026-82357

6.5 MEDIUMpublic exploit available

Published 2026-10-01 · Updated 2026-10-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromised node for instance, can initiate the LSS protocol on a device with a misconfigured identity object and potentially crash the device. Fixed in 1.1.1.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476

Public exploit & PoC references

https://github.com/rtlabs-com/c-open/releases/tag/public%2Fv1.1.1

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.