CVE-2026-75347

{
  "etk_id": "ETK-2026-1124",
  "cve_id": "CVE-2026-75347",
  "display_id": "CVE-2026-75347",
  "ghsa_id": "GHSA-cmxj-3q64-8hph",
  "euvd_id": "EUVD-2026-95916",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Expired pointer dereference in OpENer CPF handling",
  "summary": "OpENer 2.3 and master revisions through 76b95cf are affected in Common Packet Format processing. A remote party able to reach the relevant EtherNet/IP service may be able to interrupt service through the pointer-lifetime flaw.",
  "mitigation": "Restrict access to OpENer EtherNet/IP services to trusted networks and peers, and monitor them for unexpected restarts or availability failures. Update to an upstream release or commit that addresses the issue when one is published.",
  "vendor": null,
  "product": "OpENer",
  "affected": [
    {
      "affected_notes": [
        "n/a"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "n/a",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N",
  "epss_score": 0.0042,
  "epss_percentile": 0.3518,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 6.973958416666667,
  "t0_at": "2026-10-09T00:00:00+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-09T00:00:00+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T00:00:00+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75347"
    }
  }
}