A critical memory corruption vulnerability in the OpENer EtherNet/IP stack enables remote, unauthenticated attackers to trigger system crashes or potential code execution.

This vulnerability is caused by an integer underflow during the processing of SendUnitData explicit messages. A maliciously crafted request can trigger invalid memory access, leading to process crashes or unpredictable behavior in the memory space.

With a CVSS score of 9.8, this critical vulnerability poses a severe risk to industrial and embedded systems utilizing the OpENer stack. Exploitation could lead to complete loss of availability for critical control processes, and potentially allow unauthorized access or manipulation of system memory.

Immediate Action: Update the OpENer implementation by pulling the latest code from the master branch, specifically applying fixes released after commit 76b95cf.

Proactive Monitoring: Monitor industrial network traffic for malformed EtherNet/IP packets and alert on process crashes or service restarts.

Compensating Controls: Deploy industrial firewalls or deep packet inspection (DPI) solutions capable of filtering malformed EtherNet/IP traffic to prevent exploit delivery.

Public Exploit Available: Yes, a public proof-of-concept exists.

Given the critical CVSS severity and the availability of proof-of-concept code, immediate action is required to patch the OpENer stack. Organizations must verify their current version and ensure they are running a build that includes the fix for the integer underflow issue to maintain system integrity.