CVE-2026-51541

Name of the Vulnerable Software and Affected Versions OpENer version 2.3.0

Description An out-of-bounds read occurs during CIP (Common Industrial Protocol) message parsing when processing malformed explicit requests. An attacker can send a valid ENIP SendRRData frame containing a short CIP payload where the path size field specifies more path words than are actually present. The parser relies on the attacker-controlled path size and continues decoding path segments without verifying the remaining length, leading to a read operation beyond the end of the stack receive buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.