CVE-2022-43604: Opener Project Opener

Critical severity, CVSS 9.8. EPSS: 14.4% chance of exploitation in the next 30 days.

An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out-of-bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Affected products

• Opener Project Opener: before 2022-10-18 (fixed in 2022-10-18)

Published 2023-03-16. Last modified 2026-06-17.