Expired Pointer Dereference in EIPStackGroup OpENer

Executive Summary

This vulnerability is an expired pointer dereference issue in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf. It exists in the EtherNet/IP Common Packet Format handling logic and allows a remote attacker to cause a denial of service by exploiting this flaw.

Useful 0 Not Useful 0

Detection Guidance

Detecting CVE-2026-75347 requires monitoring for stack-use-after-return conditions in OpENer's CPF handling. Use AddressSanitizer (ASan) during compilation to detect memory corruption. Monitor network traffic for malformed EtherNet/IP packets with inconsistent item counts between TCP/UDP sessions. Check for crashes or protocol confusion in OpENer logs when processing crafted packets.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to a denial of service, meaning an attacker could crash the affected system or application, disrupting its normal operation and potentially causing downtime or loss of service.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes denial of service through expired pointer dereference, which could lead to system instability or crashes. For compliance with standards like GDPR or HIPAA, such disruptions may violate availability requirements, potentially leading to unauthorized access or data processing interruptions. However, the specific impact depends on system configuration and deployment context.

Useful 0 Not Useful 0

Mitigation Strategies

Update OpENer to a version beyond commit 76b95cf or apply patches addressing the expired pointer dereference in EtherNet/IP CPF handling. Disable exposed EtherNet/IP services if not required and monitor network traffic for anomalous CPF packets.

Useful 0 Not Useful 0