EIPStackGroup OpENer up to version 2.3.0 contains a use-after-free vulnerability in the CreateMessageRouterRequestStructure function of cipmessagerouter.c in the SendRRData Handler component. This memory management flaw allows an attacker to manipulate the program flow remotely, potentially leading to undefined behavior or exploitation. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The project was notified early but has not issued a fix or official advisory as of the publication date.

The vulnerability allows remote attackers to exploit a use-after-free condition in the message router request creation process, which could lead to memory corruption and potentially arbitrary code execution or denial of service. The CVSS score of 5.3 reflects a medium severity impact with partial impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider applying workarounds if any are documented by the community or restrict network access to the affected service to reduce exposure.