CVE-2015-0981

High

Published: 14/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.

Risk Assessment

Attackers may gain access to sensitive data or modify it, potentially leading to serious consequences for system integrity.

Recommendation

It is recommended to update the BACnet OPC server to the latest version to mitigate this vulnerability.

Other vulnerabilities in SCADA Engine BACnet OPC Server

CVE-2015-0979High
A heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before version 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet.

Original NVD description (English source)

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.