CVE-2026-82357

Name of the Vulnerable Software and Affected Versions RT-Labs AB C-Open CANopen versions prior to 1.1.1

Description A NULL pointer dereference occurs when the LSS (Layer Setting Services) protocol is used to configure the device. This happens if an object defined by the user application lacks all required subindexes for object 0x1018. An unauthenticated remote attacker with access to the CAN bus can initiate the LSS protocol on a device with a misconfigured identity object, which may lead to a device crash.

Recommendations Update to version 1.1.1.