VULNERABILITY INTELLIGENCE

CVE-2026-51537

CVSS score9.1 CRITICAL

EPSS probability0.65%

CISA KEVNot currently listed

Published2026-07-13

Last modified2026-08-11

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Vendor Advisory