The vulnerability in OpENer v2.3-558-g1e99582 arises from improper validation of the item_count field in the CPF parser, specifically within the CreateCommonPacketFormatStructure() function in source/src/enet_encap/cpf.c. An attacker can craft an ENIP/CPF message with a manipulated item_count value that is not consistently checked against the remaining CPF data length, resulting in an out-of-bounds read (CWE-125). This vulnerability affects the availability of the system due to potential crashes or denial of service. The CVSS 3.1 vector indicates local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability.

Successful exploitation of this vulnerability can cause an out-of-bounds read, potentially leading to application crashes or denial of service conditions. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, avoid processing untrusted ENIP/CPF messages or apply network-level controls to limit exposure to potentially malicious inputs.