The vulnerability in EIPStackGroup OpENer 2.3.0 arises from improper handling of short malformed packets in the Connection Manager's processing of ForwardOpen requests. Specifically, when a valid ENIP outer frame carries a malformed CIP ForwardOpen or LargeForwardOpen request with insufficient data, the parser continues reading fields beyond the available data, resulting in an out-of-bounds read. This flaw is remotely exploitable without authentication by sending crafted network traffic.

Successful exploitation can lead to out-of-bounds memory reads, which may cause application crashes or potentially leak sensitive memory contents. The vulnerability is remotely triggerable without authentication, increasing the risk of exploitation in exposed environments. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected service and monitor for anomalous ForwardOpen request traffic to reduce exposure.