58 matches found
CVE-2020-12042
CVE-2020-12042 affects Opto 22 SoftPAC Project (version 9.6 and prior). The issue is that update ZIP paths are not sanitized, allowing an attacker with user privileges to gain arbitrary file write access with system access. Affected product: SoftPAC Project; root cause: unsanitized paths in firmw...
Opto 22 SoftPAC Project
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Opto 22 Equipment: SoftPAC Project Vulnerabilities: External Control of File Name or Path, Improper Verification of Cryptographic Signature, Improper Access Control, Uncontrolled Search Path...
Heap overflow
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prio...
CVE-2015-1006
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prio...
CVE-2015-1006
CVE-2015-1006 concerns a heap-based buffer overflow in a vulnerable Opto 22 component (PAC Project Professional/Basic, PAC Display Basic/Professional, OptoOPCServer, OptoDataLink installed by the PAC Project installer) that may allow remote code execution. Affected product versions are prior to R...
CVE-2015-1006
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prio...
Stack overflow
A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions...
CVE-2015-1007
A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions...
CVE-2015-1007
CVE-2015-1007 describes a stack-based buffer overflow in OPCTest.exe that could enable remote code execution on multiple Opto 22 PAC Project components (Professional/Basic, Display, OptoOPCServer, OptoDataLink) installed by PAC Project, for versions before the specified fixed releases. The root c...
CVE-2015-1007
A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions...
CVE-2018-14807
A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution...
CVE-2018-14807
A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution...
Stack overflow
A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution...
CVE-2018-14807
CVE-2018-14807 affects Opto 22 PAC Control Basic and PAC Control Professional (versions R10.0a and prior). The vulnerability is a stack-based buffer overflow in the control software that may allow remote code execution. Affected products include PAC Control Basic and PAC Control Professional; the...
CVE-2018-14807
A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution...
Opto 22 PAC Control Basic and PAC Control Professional
1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Opto 22 Equipment: PAC Control Basic and PAC Control Professional Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the device...
Opto 22 Multiple Product Vulnerabilities
OVERVIEW Ivan Sanchez from Nullcode Team has identified two buffer overflow vulnerabilities that are present in Opto 22’s PAC Project Professional, PAC Project Basic, OptoOPCServer, OptoDataLink, PAC Display Basic, and PAC Display Professional products. Opto 22 has released new versions that...
