CVE-2026-75348

Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer versions 2.3 through master commit 76b95cf

Description An out-of-bounds read occurs in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue is located in the CreateCommonPacketFormatStructure() function, which fails to validate if the remaining CPF buffer contains the complete fixed sockaddr structure when parsing optional socket address information items of type 0x8000 or 0x8001. This flaw allows a remote attacker to trigger a denial of service.

Recommendations Update EIPStackGroup OpENer to a version beyond commit 76b95cf.