CVE-2007-4473
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface,…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.69%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 5.69% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- gesytec easylon/opc server
- Source
- cret@cert.org
References
- http://osvdb.org/42650
- http://secunia.com/advisories/28079
- http://www.kb.cert.org/vuls/id/205073Patch, US Government Resource
- http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf
- http://www.neutralbit.com/en/rd/opctest/
- http://www.securityfocus.com/bid/26876
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39062
- http://osvdb.org/42650
- http://secunia.com/advisories/28079
- http://www.kb.cert.org/vuls/id/205073Patch, US Government Resource
- http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf
- http://www.neutralbit.com/en/rd/opctest/
- http://www.securityfocus.com/bid/26876
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39062
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.