Vulnerability Details CVE-2026-51537
EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 9.1
References
Products affected by CVE-2026-51537
-
cpe:2.3:a:opener_project:opener:2.3.0