The vulnerability is a buffer overflow in the Get_Attribute_List function of the EIPStackGroup OpENer network stack. When a specially crafted Common Packet Format packet is processed, the internal buffer is overwritten, causing the function to terminate unexpectedly. This results in the application process failing and the network service becoming unavailable. The flaw is classified as CWE-284, an improper access control weakness, leading to a denial of service.

The flaw resides in the OpENer source code at commit 76b95c. Any deployment that uses this commit or a derivative of the same source code may be affected. No vendor name or version range is specified, so any system incorporating the affected code at or after that revision could be exposed.

The CVSS score of 7.5 indicates a moderate to high impact. The EPSS score of < 1% shows that the probability of exploitation is very low at this time, and the vulnerability is not listed in CISA KEV. The likely attack vector is remote, based on the fact that the overflow is triggered by a network packet. An attacker would need the ability to send a crafted CPF packet to the vulnerable function; if successful, the service would crash, causing a denial of service.