CVE-2026-75347Published
EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-75347 · Microsoft / collected KEV context
cve-program · CVE-2026-75347
- https://github.com/EIPStackGroup/OpENer/issues/575
- https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/cpf.c
- https://github.com/EIPStackGroup/OpENer/blob/master/source/src/enet_encap/encap.c
- https://github.com/EIPStackGroup/OpENer/blob/master/source/src/ports/generic_networkhandler.c
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.