CVE-2026-75348: n/a
Description
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.
CVSS v3.1
Score 7.5high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the CreateCommonPacketFormatStructure() function of EIPStackGroup OpENer versions v2.3 and master up to commit 76b95cf. It arises from insufficient validation of the remaining Common Packet Format (CPF) buffer when parsing optional socket address information items of type 0x8000 or 0x8001. This can result in an out-of-bounds read, which may be exploited by a remote attacker to cause a denial of service by crashing the affected application.
Potential Impact
A remote attacker can trigger a denial of service by sending specially crafted packets that exploit the out-of-bounds read vulnerability in the CPF parser. There is no indication of confidentiality or integrity impact. The vulnerability does not require privileges or user interaction and can be exploited over the network.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider applying network-level protections such as filtering or blocking suspicious EtherNet/IP traffic to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-08-17T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac913f62cdf04f6566b1a20
Added to database: 10/09/2026, 16:19:02 UTC
Last enriched: 10/09/2026, 16:33:16 UTC
Last updated: 10/10/2026, 03:48:07 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.