Opener vulnerabilities

7 known vulnerabilities in Opener from Opener Project. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Opener: Out-of-bounds Read

  CVE-2026-51541Jul 13, 2026Opener Project

  OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field

• 9.8 Critical severity

  Opener: Integer Underflow (Wrap or Wraparound)

  CVE-2026-51540Jul 13, 2026Opener Project

  OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).

• 9.1 Critical severity

  Opener: Improper Access Control

  CVE-2026-51538Jul 13, 2026Opener Project

  EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies whether the provided session_handle exists in t

• 9.1 Critical severity

  Opener: Out-of-bounds Read

  CVE-2026-51537Jul 13, 2026Opener Project

  EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/Large

• 9.1 Critical severity

  Opener: Integer Overflow or Wraparound

  CVE-2026-51536Jul 13, 2026Opener Project

  In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream functio

• 7.5 High severity

  OpENer: Access of Uninitialized Pointer

  CVE-2022-43606Mar 16, 2023EIP Stack GroupEPSS 8.05%

  A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the serve

• 9.8 Critical severity

  OpENer: Out-of-bounds Write

  CVE-2022-43605Mar 16, 2023EIP Stack GroupEPSS 14.4%

  An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the