CVE-2026-51536 — In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP...
CVE-2026-51536 漏洞深度分析
漏洞概述
CVE 编号： CVE-2026-51536
CVSS 评分： 9.1（CRITICAL）
CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE 分类： CWE-190
漏洞状态： Received
发布时间： 2026-07-13T22:16:47.263
最后更新： 2026-07-14T14:16:33.823
漏洞描述
In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 (a 16-bit signed integer). If a maliciously crafted packet with specific length fields is processed, the length parameter can overflow or be truncated into a negative value. This negative length bypasses subsequent bounds checking (due to signed/unsigned comparison issues) and is ultimately used in memory operations, leading to a Stack Buffer Overflow when reading data in DecodePaddedEPath.
影响分析
此漏洞的具体影响取决于实际利用场景。"
修复建议
- 及时关注厂商发布的安全更新和补丁
- 升级受影响组件到最新版本
- 如无法立即升级，参考厂商提供的临时缓解措施
- 加强网络访问控制和监控