CVEvulnerability
CVE-2007-4473
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
Affected configurations
• gesytec easylon opc server 2.30.32
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/42650 osvdb.org
- http://secunia.com/advisories/28079 secunia.com
- http://www.kb.cert.org/vuls/id/205073 Patch, US Government Resource
- http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf www.neutralbit.com
- http://www.neutralbit.com/en/rd/opctest/ www.neutralbit.com
- http://www.securityfocus.com/bid/26876 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39062 exchange.xforce.ibmcloud.com
- http://osvdb.org/42650 osvdb.org
- http://secunia.com/advisories/28079 secunia.com
- http://www.kb.cert.org/vuls/id/205073 Patch, US Government Resource
- http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf www.neutralbit.com
- http://www.neutralbit.com/en/rd/opctest/ www.neutralbit.com
- http://www.securityfocus.com/bid/26876 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39062 exchange.xforce.ibmcloud.com