Out-of-Bounds Read in OpENer Stack

Executive Summary

CVE-2026-75345 is an out-of-bounds read vulnerability in OpENer v2.3.0. It occurs in the unconnected explicit messaging path when processing crafted requests with an overlong Padded EPath. The vulnerability allows a remote attacker to cause a denial of service by crashing the process through an AddressSanitizer-confirmed out-of-bounds read.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for crashes or denial-of-service events in OpENer-based systems handling EtherNet/IP traffic. Use network traffic analysis tools like Wireshark to inspect TCP port 44818 for malformed requests with overlong Padded EPath. Enable AddressSanitizer or similar tools during compilation to catch out-of-bounds reads.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can be exploited remotely without authentication via TCP port 44818. An attacker could crash the OpENer-based device, leading to a denial of service. This may disrupt industrial automation systems relying on EtherNet/IP communication.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability, an out-of-bounds read in OpENer v2.3.0, could lead to denial-of-service conditions in industrial control systems. Such disruptions may impact systems handling sensitive data, potentially violating compliance with standards like GDPR (data integrity) or HIPAA (availability of critical systems). However, the provided context does not explicitly link this vulnerability to specific compliance failures.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update OpENer to a patched version beyond commit 76b95cf. If updating is not possible, restrict network access to TCP port 44818 using firewalls. Disable unauthenticated explicit messaging paths if feasible. Monitor vendor advisories for official patches or workarounds.

Useful 0 Not Useful 0