Intel

CVE-2026-51541

opener_project opener: Sicherheitsluecke

criticalEPSS 0.5%

Description

OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field claims that many more path words are present than are actually available. Because the parser trusts the attacker-controlled path_size and continues decoding path segments without a remaining-length boundary, it reads beyond the end of the stack receive buffer.

Source: NVD (NIST)CVE.org (MITRE)cvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

opener_projectopener

Metrics

XIEM Effective CVSS
9.1
Source: nvd-v3
EPSS percentile
44.4 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
critical
Priority score
83.37
Exploit maturity
no public PoC known
CVSS v3
9.1
EPSS score
0.5 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-13 22:16 UTC

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. Initial Analysis2026-08-11 16:26 UTC· nvd@nist.gov
    • CPE Configuration: OR *cpe:2.3:a:opener_project:opener:2.3.0:*:*:*:*:*:*:*
    • Reference Type: MITRE: https://gist.github.com/MrAlaskan/705c680856e48c535148265c0899ad4b Types: Third Party Advisory
    • Reference Type: MITRE: https://github.com/EIPStackGroup/OpENer/issues/582 Types: Exploit, Issue Tracking, Vendor Advisory
    • Reference Type: CISA-ADP: https://github.com/EIPStackGroup/OpENer/issues/582 Types: Exploit, Issue Tracking, Vendor Advisory

Linked advisories