CVE Feed

    Dashboard / CVE / CVE-2015-1006

    CVE-2015-1006

    A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.

    Published:May 10, 2019
    Last Modified:Nov 21, 2024
    EPS:May 10, 2019
    EPSS Score:0.01104
    CVSS Score:9.8

    Affected Products

    Vendor
    Opto22
    Product
    Optodatalink
    Vendor
    Opto22
    Product
    Optoopcserver
    Vendor
    Opto22
    Product
    Pac Display
    Vendor
    Opto22
    Product
    Pac Project

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High