Skip to content

Instantly share code, notes, and snippets.

@MrAlaskan

MrAlaskan/CVE-2026-51541.md

Created July 9, 2026 03:43
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save MrAlaskan/705c680856e48c535148265c0899ad4b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save MrAlaskan/705c680856e48c535148265c0899ad4b to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2026-51541
Raw
CVE-2026-51541.md

Security Advisory: CVE-2026-51541

Vulnerability Information

  • CVE ID: CVE-2026-51541
  • Vendor: EIPStackGroup
  • Product: OpENer (Version 2.3.0)
  • Vulnerability Type: CWE-125: Out-of-bounds Read
  • Attack Type: Remote, Unauthenticated
  • Impact: Denial of Service (DoS)

Description

An out-of-bounds read vulnerability exists in the CIP explicit message parsing logic of OpENer 2.3.0. A remotely crafted malformed CIP request may cause the EPATH decoder to read beyond the valid receive buffer, leading to a Denial of Service condition.

Affected Component

The vulnerability affects the CIP explicit message parsing path, including source/src/cip/cipcommon.c and source/src/cip/cipmessagerouter.c, specifically the DecodePaddedEPath and CreateMessageRouterRequestStructure functions.

Attack Vectors

An unauthenticated, remote attacker with network access to the target OpENer instance can exploit this vulnerability by connecting to the EtherNet/IP TCP port, typically TCP/44818, and completing session registration.

The attacker can then send a crafted SendRRData request containing a malformed CIP explicit message with inconsistent path length information. Due to insufficient validation of the remaining input length during EPATH decoding, the parser may read beyond the valid receive buffer.

Successful exploitation can crash the OpENer process and deny service to legitimate industrial communication clients.

References

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment