Description
EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.
Published: 2026-10-09
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Immediate Patch
AI Analysis

Impact

An expired pointer dereference flaw in the EtherNet/IP Common Packet Format handling code can be exploited remotely to trigger a crash, disrupting service.

Affected Systems

The vulnerability impacts EIPStackGroup OpENer versions 2.3 and the master branch up to commit 76b95cf. No other vendors or product versions are reported.

Risk and Exploitability

The CVSS score of 7.5 indicates significant severity, yet the EPSS score of < 1% indicates a very low but non‑zero exploitation probability. It is not listed in CISA KEV, implying no known public exploitation yet, but the nature of the flaw allows a remote attacker to cause a denial of service by abusing a dangling pointer.

Generated by OpenCVE AI on October 17, 2026 at 10:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update OpENer to a version released after commit 76b95cf or to a patched release that resolves the expired pointer issue.
  • If an update is not immediately feasible, isolate the affected instance from external network traffic that may trigger the CPF handling path until a fix is applied.
  • Monitor the application and network for abnormal crashes or repeated error logs that may indicate attempts to exploit the flaw, and apply rapid containment measures such as restarting services or temporarily disabling CPF functionality.

Generated by OpenCVE AI on October 17, 2026 at 10:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 10:45:00 +0000

Type Values Removed Values Added
Title Expired Pointer Dereference in EtherNet/IP CPF Handling Allows Remote Denial of Service

Sat, 17 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Title Expired Pointer Dereference Leading to Denial of Service in EIPStackGroup OpENer
Weaknesses CWE-416

Tue, 13 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 09 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Title Expired Pointer Dereference Leading to Denial of Service in EIPStackGroup OpENer
First Time appeared Eipstackgroup
Eipstackgroup opener
Weaknesses CWE-416
Vendors & Products Eipstackgroup
Eipstackgroup opener

Fri, 09 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N'}

Subscriptions

Eipstackgroup Opener
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-13T16:30:35.421Z

Reserved: 2026-08-17T00:00:00.000Z

Link: CVE-2026-75347

cve-icon Vulnrichment

Updated: 2026-10-13T16:30:27.863Z

cve-icon NVD

Status : Deferred

Published: 2026-10-09T17:16:48.403

Modified: 2026-10-13T17:17:45.810

Link: CVE-2026-75347

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T10:30:07Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption