What is GHSA-7wpf-vhm2-3mpw?

GHSA-7wpf-vhm2-3mpw is a security advisory published by GitHub Security Advisories with Critical severity. EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager...

Which CVE IDs does GHSA-7wpf-vhm2-3mpw cover?

GHSA-7wpf-vhm2-3mpw covers the following CVE IDs: CVE-2026-51537. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7wpf-vhm2-3mpw?

GHSA-7wpf-vhm2-3mpw has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-7wpf-vhm2-3mpwCriticalCVSS 9.1

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager...

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-51537 →

📋 Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51537
https://github.com/EIPStackGroup/OpENer/issues/564
https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e
https://github.com/advisories/GHSA-7wpf-vhm2-3mpw