CVEvulnerability

CVE-2015-0980

9.0 HIGH Published 2015-03-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
Weaknesses
CWE-20

Description

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.

Affected configurations

• scadaengine bacnet opc server (<= 2.1.359.22)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References