CVE-2015-1006
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.
Published:May 10, 2019
Last Modified:Nov 21, 2024
EPS:May 10, 2019
EPSS Score:0.01104
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Opto22
Product
Optodatalink
Opto22
Optodatalink
Vendor
Opto22
Product
Optoopcserver
Opto22
Optoopcserver
Vendor
Opto22
Product
Pac Display
Opto22
Pac Display
Vendor
Opto22
Product
Pac Project
Opto22
Pac Project
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
