Opener Project

16 CVEs across 1 Opener Project products. Browse Opener Project vulnerabilities, severities, and proof-of-concept exploits.

Opener Project products with known CVEs

ProductCVEs
Opener16
Opener Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-51541Critical9.12026-07-13OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An att…
CVE-2026-51540Critical9.82026-07-13OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connect…
CVE-2026-51538Critical9.12026-07-13EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server p…
CVE-2026-51537Critical9.12026-07-13EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malfor…
CVE-2026-51536Critical9.12026-07-13In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across th…
CVE-2022-43606High7.52023-03-16A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit…
CVE-2022-43605Critical10.02023-03-16An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c…
CVE-2022-43604Critical10.02023-03-16An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c…
CVE-2022-32434High7.82022-07-15EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d.
CVE-2021-27500High7.52022-05-12A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serv…
CVE-2021-27498High7.52022-05-12A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-serv…
CVE-2021-27482High7.52022-05-12A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read…
CVE-2021-27478High8.22022-05-12A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service…
CVE-2021-21777Critical10.02021-06-17An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A spe…
CVE-2020-13556Critical9.82020-12-11An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially c…
CVE-2020-13530High7.52020-12-11A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large numb…