CVE-2026-18790
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A weakness has been identified in Systerel S2OPC up to 1.7.3, affecting the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse in the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the DeleteMonitoredItemsRequest Handler component. This manipulation causes an out-of-bounds read. The attack can only be executed locally, and the exploit has been made public.
Risk Assessment
A local attacker could exploit the out-of-bounds read to disclose memory contents or cause a crash, potentially compromising confidentiality and availability.
Recommendation
Upgrade Systerel S2OPC to a version newer than 1.7.3 if available, and monitor public disclosures. Restricting local access to the system may reduce risk.
Original NVD description (English source)
A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the component DeleteMonitoredItemsRequest Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.