CVEvulnerability
CVE-2015-0981
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.
Affected configurations
• scadaengine bacnet opc server (<= 2.1.359.22)
Related
Weakness · not in database (1)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03 Third Party Advisory, US Government Resource