C-Open CANopen stack multiple vulnerabilities
view advisory published 2026-10-01
RT-Labs AB C-Open CANopen contains a NULL pointer dereference and a write protection bypass vulnerability. These vulnerabilities can potentially crash the device or allow any CANopen node to overwrite read-only OD entries using two SDO frames.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-82358US | —OT elevated | — | ||
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write perm… | ||||
| CVE-2026-82357US | — | — | ||
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all requir… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedC-Open
Fixed in 1.1.1.
https://rt-labs.com/wp-content/uploads/2026/09/RRTL-260929-01.pdf - FixedC-Open
Fixed in 1.1.1.
https://rt-labs.com/wp-content/uploads/2026/09/RRTL-260929-01.pdf
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan