PT-2022-3387 · Matrikon · Matrikon Opc Server

William Knowles · Published 2022-05-26 · Updated 2022-06-26 · CVE-2022-1261

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Matrikon OPC Server (all versions)

Description The issue is related to the implementation of the IPersistFile interface in the Matrikon OPC Server, which is associated with inadequate access control. This allows a low-privileged user connected to the OPC server to execute operating system processes with system-level privileges using the functions of the IPersistFile. The vulnerability can be exploited by a remote attacker to execute arbitrary code.

Recommendations For all versions of Matrikon OPC Server, consider restricting access to the IPersistFile functions to prevent low-privileged users from executing operating system processes with elevated privileges. As a temporary workaround, consider disabling the use of the IPersistFile interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2022-04158

CVE-2022-1261

Affected Products

Matrikon Opc Server

References · 4

• https://bdu.fstec.ru/vul/2022-04158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1261 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-144-02 · Note
• https://t.me/cibsecurity/43418 · Telegram Post