Description
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39062
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/42650
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28079
Various Sources x_refsource_misc
http://www.neutralbit.com/en/rd/opctest/
Various Sources x_refsource_misc
http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26876
Patch, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/205073
Scores
EPSS
0.0569
EPSS Percentile
92.1%
Details
CWE
CWE-119
Status
published
Products (1)
gesytec_easylon/opc_server
2.30.32
Published
Dec 17, 2007
Tracked Since
Feb 18, 2026