Lucene search

[email protected]CVE-2007-1319

HistoryMar 19, 2007 - 10:19 p.m.

CVE-2007-1319

2007-03-1922:19:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2007-1319

iopcserver

removegroup

opcda

takebishi electric

devicexplorer

ole

process control

opc server

arbitrary code

remote attack

memory access

hidic

melsec

fa-m3

modbus

sysmac

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.463 Medium

EPSS

Percentile

97.4%

JSON

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers.

CPENameOperatorVersion
takebishi_corporation:devicexplorer_opc_servertakebishi corporation devicexplorer opc servereq3.12_build1
takebishi_corporation:devicexplorer_opc_servertakebishi corporation devicexplorer opc serverle3.12_build2

CPE	Name	Operator	Version
takebishi_corporation:devicexplorer_opc_server	takebishi corporation devicexplorer opc server	eq	3.12_build1
takebishi_corporation:devicexplorer_opc_server	takebishi corporation devicexplorer opc server	le	3.12_build2

References

secunia.com/advisories/24570

www.faweb.net/us/opc/1231207.html

www.kb.cert.org/vuls/id/926551

www.neutralbit.com/advisories/NB07-07.txt

www.neutralbit.com/advisories/NB07-08.txt

www.neutralbit.com/advisories/NB07-09.txt

www.neutralbit.com/advisories/NB07-10.txt

www.neutralbit.com/advisories/NB07-17.txt

www.securityfocus.com/archive/1/463537/100/0/threaded

www.securityfocus.com/archive/1/463546/100/0/threaded

www.securityfocus.com/archive/1/463550/100/0/threaded

www.securityfocus.com/archive/1/463556/100/0/threaded

www.securityfocus.com/archive/1/463559/100/0/threaded

www.securityfocus.com/bid/23037

www.securitytracker.com/id?1017793

www.vupen.com/english/advisories/2007/1029

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.463 Medium

EPSS

Percentile

97.4%

JSON

Related for CVE-2007-1319

securityvulns6 cert1 prion1