Description
OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service
Published: 2026-10-09
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Monitor
AI Analysis

Impact

An integer underflow was discovered in the server‑side EtherNet/IP ForwardOpen connection‑path parser of OpENer v2.3. The flaw allows a remote attacker to send specially crafted packets that cause the parser to underflow, leading the server to crash or become unresponsive. The impact is purely on availability; the vulnerability does not disclose confidential data or allow unauthorized access, but it can disrupt network services that rely on OpENer.

Affected Systems

The issue affects the OpENer project, specifically the v2.3 release identified by commit 76b95cf. Any instance running this version and accepting EtherNet/IP ForwardOpen requests is potentially affected. No additional vendor or product information is available.

Risk and Exploitability

The vulnerability is remotely exploitable over the network and is not listed in the CISA KEV catalog. Its CVSS score is 7.5, and the EPSS score is less than 1%, indicating a low probability of exploitation. However, because it causes a DoS, organizations running exposed OpENer implementations should consider the risk to be significant from an availability standpoint.

Generated by OpenCVE AI on October 13, 2026 at 12:52 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to a patched or newer version of OpENer when one becomes available
  • Block or restrict EtherNet/IP ForwardOpen traffic at the network perimeter to prevent exposed endpoints from receiving malicious packets
  • If a patch cannot be applied, consider migrating to an alternative implementation or disabling the ForwardOpen feature in current deployment

Generated by OpenCVE AI on October 13, 2026 at 12:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 13:15:00 +0000

Type Values Removed Values Added
Title Integer Underflow in OpENer EtherNet/IP ForwardOpen Parser Enables Remote DoS

Tue, 13 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 09 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Title Integer Underflow in OpENer EtherNet/IP ForwardOpen Parser Enables Remote DoS
First Time appeared Eipstackgroup
Eipstackgroup opener
Weaknesses CWE-191
Vendors & Products Eipstackgroup
Eipstackgroup opener

Fri, 09 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Description OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service
References

Subscriptions

Eipstackgroup Opener
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-13T10:59:41.209Z

Reserved: 2026-08-17T00:00:00.000Z

Link: CVE-2026-75352

cve-icon Vulnrichment

Updated: 2026-10-13T10:59:32.046Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-09T19:16:42.167

Modified: 2026-10-16T17:16:41.300

Link: CVE-2026-75352

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T13:00:13Z

Weaknesses
  • CWE-191

    Integer Underflow (Wrap or Wraparound)