CVE-2015-7939
CriticalSummary
A heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before version 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.
Risk Assessment
Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise and data exposure for the organization.
Recommendation
It is recommended to update VisiLogic OPLC IDE to version 9.8.09 or later to mitigate this vulnerability.
Other vulnerabilities in Unitronics VisiLogic OPLC IDE
See all- CVE-2015-7905High
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
- CVE-2016-4519Critical
A stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before version 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.
Original NVD description (English source)
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.