PT-2018-12740 · Opto 22 · Pac Control Basic+1

Robert Hawes · Publicado 2018-10-18 · Atualizado 2021-04-26 · CVE-2018-14807

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Opto 22 PAC Control Basic and PAC Control Professional versions prior to R10.0a

Description A stack-based buffer overflow issue may allow remote code execution.

Recommendations For versions prior to R10.0a, update to version R10.0a or later to resolve the issue.

Correção

Stack Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-121

CWE-787

Identificadores relacionados

CVE-2018-14807

Produtos afetados

Pac Control Basic

Pac Control Professional

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-18-247-01 · Nota
• https://osv.dev/vulnerability/CVE-2018-14807 · Aviso do Fabricante
• https://opto22.com/support/resources-tools/knowledgebase/kb87547 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14807 · Nota de Segurança