PT-2026-57876 · Openemr · Openemr
CVE-2026-51537
·
Published
2026-07-13
·
Updated
2026-08-11
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
EIPStackGroup OpENer version 2.3.0 (commit 76b95cf)
Description
An out-of-bounds read occurs in the Connection Manager when handling ForwardOpen requests during the processing of short malformed packets. An unauthenticated remote attacker can trigger this by sending a valid ENIP outer frame containing a malformed CIP ForwardOpen or LargeForwardOpen request, which causes the parser to continue reading fields despite insufficient request data.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openemr