Approved changes feed: RSS · Atom

cpe:2.3:a:opener_project:opener:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpener Project (c5dfef98-716c-54bd-b361-74addb1cccde)
ProductOpener (c1b162c1-9a8a-56cc-938c-f784b9a3474d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/eipstackgroup/opener purl2cpe 2026-06-01 10:15:01.321495

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43606 vulnerable 2026-06-08 05:49:33.602426 Details available
HIGH (7.5)
A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Published: 2023-03-16T20:02:09.200Z
Updated: 2024-08-03T13:32:59.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43605 vulnerable 2026-06-08 05:49:33.601947 Details available
CRITICAL (10)
An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Published: 2023-03-16T20:14:14.574Z
Updated: 2024-08-03T13:32:59.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43604 vulnerable 2026-06-08 05:49:33.601548 Details available
CRITICAL (10)
An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out-of-bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.
Published: 2023-03-16T20:14:14.331Z
Updated: 2025-03-05T19:24:40.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27500 vulnerable 2026-06-08 05:31:21.711033 EIPStackGroup OpENer Ethernet/IP Reachable Assertion
HIGH (7.5)
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
Published: 2022-05-12T19:20:00.000Z
Updated: 2025-04-16T16:22:11.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27498 vulnerable 2026-06-08 05:31:21.710041 EIPStackGroup OpENer Ethernet/IP Reachable Assertion
HIGH (7.5)
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition.
Published: 2022-05-12T19:18:38.000Z
Updated: 2025-04-16T16:22:17.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27482 vulnerable 2026-06-08 05:31:21.684063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27478 vulnerable 2026-06-08 05:31:21.678520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.