CVE-2021-27482

HIGH

EIPStackGroup OpENer EtherNet/IP <Feb 10, 2021 - Info Disclosure

Title source: llm

Description

A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_confirm

https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02

Third Party Advisory x_refsource_confirm

https://github.com/EIPStackGroup/OpENer

View Writeup ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.0019

EPSS Percentile 41.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-125

Status published

Products (1)

opener_project/opener < 2.3

Published May 12, 2022

Tracked Since Feb 18, 2026