Opener Project vulnerabilities
We track 7 vulnerabilities in Opener Project products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
Latest Opener Project vulnerabilities
- 9.1 Critical severity
Opener: Out-of-bounds Read
OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field
- 9.8 Critical severity
Opener: Integer Underflow (Wrap or Wraparound)
OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).
- 9.1 Critical severity
Opener: Improper Access Control
EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies whether the provided session_handle exists in t
- 9.1 Critical severity
Opener: Out-of-bounds Read
EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/Large
- 9.1 Critical severity
Opener: Integer Overflow or Wraparound
In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream functio
- 7.5 High severity
OpENer: Access of Uninitialized Pointer
A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the serve
- 9.8 Critical severity
OpENer: Out-of-bounds Write
An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the