EIPStackGroup OpENer contains an out‑of‑bounds read in the Connection Manager’s request parsing routine. When supplied with a specially crafted message, a remote host can trigger the read and cause the program to terminate, resulting in a denial of service. The CVE description indicates that exploitation leads only to service interruption, with no evidence of code execution or privilege escalation. The vulnerability directly causes a crash of the OpENer service leading to a denial of service. The weakness is a classic out‑of‑bounds read and also triggers resource exhaustion (CWE-400).

All systems running EIPStackGroup OpENer version 2.3.0 or earlier, up to commit 76b95cf on the master branch. Devices with network exposure to the OpENer endpoint are susceptible.

The CVSS score of 7.5 classifies this as a high‑severity issue. The EPSS score of < 1% (approximately 0.00453) indicates a very low exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no documented exploitation yet. The likely attack vector is remote over the network, where an attacker sends malformed requests to the OpENer instance. If exploited, the affected device would experience service interruption, potentially disrupting industrial control or IoT functions. The weakness involves an out‑of‑bounds read and can be used to exhaust system resources (CWE-400).