CVE-2015-0979

High

Published: 14/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet.

Risk Assessment

This vulnerability poses a significant risk to organizations by allowing remote attackers to take control of the system through arbitrary code execution.

Recommendation

It is recommended to update the BACnet OPC Server to version 2.1.371.24 or later to mitigate this vulnerability.

Other vulnerabilities in SCADA Engine BACnet OPC Server

CVE-2015-0981High
The SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.

Original NVD description (English source)

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet.