CyberRota Analysis
AI-GeneratedOpENer 2.3.0 is vulnerable to an out-of-bounds read due to improper handling of malformed explicit requests, allowing attackers to exploit the path_size field in CIP message parsing. This vulnerability can lead to potential information disclosure or application crashes, making it critical for organizations using this version to prioritize immediate remediation. Users of OpENer should assess their exposure and apply necessary updates to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field claims that many more path words are present than are actually available. Because the parser trusts the attacker-controlled path_size and continues decoding path segments without a remaining-length boundary, it reads beyond the end of the stack receive buffer.
Related CVEs
Other vulnerabilities affecting the same vendor(s)