CVE-2026-51536

Name of the Vulnerable Software and Affected Versions OpENer version 2.3.0

Description An issue exists when parsing incoming Common Industrial Protocol (CIP) network packets where the length parameter is inconsistently typed across the call stack. An upstream length calculated as an int is passed to a downstream function expecting an EipInt16 (a 16-bit signed integer). A maliciously crafted packet can cause the length parameter to overflow or be truncated into a negative value, bypassing bounds checking due to signed/unsigned comparison issues. This leads to a Stack Buffer Overflow—a condition where a program writes more data to a buffer on the stack than it can hold—when reading data in the DecodePaddedEPath() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.