CVE-2026-82357

RT-Labs AB C-Open CANopen NULL pointer dereference

State: Published
Severity: 7.1 High
Published: Oct 1, 2026
Updated: Oct 7, 2026
Reserved: Aug 28, 2026

Description

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromised node for instance, can initiate the LSS protocol on a device with a misconfigured identity object and potentially crash the device. Fixed in 1.1.1.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	cisa-cg
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	cisa-cg

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
C-OpenRT-Labs AB	before 1.1.1Affected 1.1.1Not affected

References

urlvendor-advisory
urlrelease-notes
urlthird-party-advisory
urlvdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.