An unauthenticated remote attacker can bypass access controls in OpENer 2.3.0 by reusing a valid session handle from another client, leading to unauthorized command execution.

This is an improper access control vulnerability in the encapsulation session handling mechanism. The server validates the existence of a session handle but fails to bind that handle to the originating TCP connection, allowing an attacker to perform unauthorized actions using a hijacked session.

This vulnerability is rated at 9.1 on the CVSS scale, signifying a critical threat. It allows for unauthorized command processing, which could lead to manipulation of industrial equipment, unauthorized data access, or forced service disruption, impacting the integrity and availability of the controlled environment.

Immediate Action: Consult the vendor advisory at https://github.com/EIPStackGroup/OpENer/issues/565 and prepare to deploy the official patch when released.

Proactive Monitoring: Review logs for multiple connections attempting to utilize the same session handle or unusual command patterns that deviate from standard operational behavior.

Compensating Controls: Deploy network-level authentication or VPNs to ensure that only authorized clients can access the network segments hosting the OpENer service.

Public Exploit Available: Yes, a public proof-of-concept exists as referenced in the provided data.

Security teams must treat this vulnerability with the highest priority due to the critical risk of session hijacking. Ensure that any exposed services are protected by robust perimeter security until a vendor-supplied patch is successfully deployed.