CVE-2022-43606: Opener Project Opener

High severity, CVSS 7.5. EPSS: 8% chance of exploitation in the next 30 days.

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.

Affected products

• Opener Project Opener: before 2022-10-18 (fixed in 2022-10-18)

Published 2023-03-16. Last modified 2026-06-17.