PT-2019-7162 · Opto 22 · Opto 22 Optodatalink+5

Ivan Sanchez · Publicado 2019-05-10 · Atualizado 2019-10-09 · CVE-2015-1006

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opto 22 PAC Project Professional versions prior to R9.4006 Opto 22 PAC Project Basic versions prior to R9.4006 Opto 22 PAC Display Basic versions prior to R9.4f Opto 22 PAC Display Professional versions prior to R9.4f Opto 22 OptoOPCServer versions prior to R9.4c Opto 22 OptoDataLink versions prior to R9.4d and versions installed by PAC Project installer prior to R9.4006

Description A vulnerable file is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system.

Recommendations For Opto 22 PAC Project Professional versions prior to R9.4006, upgrade to version R9.4006 or later. For Opto 22 PAC Project Basic versions prior to R9.4006, upgrade to version R9.4006 or later. For Opto 22 PAC Display Basic versions prior to R9.4f, upgrade to version R9.4f or later. For Opto 22 PAC Display Professional versions prior to R9.4f, upgrade to version R9.4f or later. For Opto 22 OptoOPCServer versions prior to R9.4c, upgrade to version R9.4c or later. For Opto 22 OptoDataLink versions prior to R9.4d and versions installed by PAC Project installer prior to R9.4006, upgrade to version R9.4d or later and ensure the PAC Project installer is version R9.4006 or later.

Correção

Stack Overflow

Buffer Overflow

Enumeração de Fraquezas

CWE-121

CWE-119

Identificadores relacionados

CVE-2015-1006

Produtos afetados

Opto 22 Optodatalink

Opto 22 Optoopcserver

Opto 22 Pac Display Basic

Opto 22 Pac Display Professional

Opto 22 Pac Project Basic

Opto 22 Pac Project Professional

Referências · 2

• https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1006 · Nota de Segurança