Open Automation Software OPC Systems.NET Vulnerability

Overview This Advisory is a follow-up to “ICS-ALERT-11-285-01—Open Automation Software OPC Systems.NET Vulnerability” that was posted on the ICS-CERT website on October 12, 2011. Independent researcher Luigi Auriemma publicly reported a malformed packet vulnerability in Open Automation Software’s...

CVE-2012-0227

The CVE-2012-0227 entry refers to a buffer overflow in the VSFlex7.VSFlexGrid ActiveX control (ComponentOne FlexGrid 7.1) used by Open Automation Software OPC Systems.NET. The vulnerability is triggered by a long archive file name argument to the Archive method, allowing remote denial of service ...

CVE-2012-5311

CVE-2012-5311 is rejected/not used per the initial description.