Описание
Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.359.22 (включая)
cpe:2.3:a:scadaengine:bacnet_opc_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01564
Низкий
9 Critical
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.
EPSS
Процентиль: 81%
0.01564
Низкий
9 Critical
CVSS2
Дефекты
CWE-20