CVE-2015-1007

HIGH

Opto 22 PAC Project Professional < R9.4008 - Stack-based Buffer Overflow via Crafted Configuration File

Title source: llm

Description

A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions prior to R9.4g, PAC Display Professional versions prior to R9.4g, OptoOPCServer version R9.4c and prior that were installed by PAC Project installer, versions prior to R9.4008, and OptoDataLink version R9.4d and prior that were installed by PAC Project installer, versions prior to R9.4008. Opto 22 suggests upgrading to the new product version as soon as possible.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01

Scores

CVSS v3 7.8

EPSS 0.0267

EPSS Percentile 83.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-121

Status published

Products (4)

opto22/optodatalink < r9.4d

opto22/optoopcserver < r9.4c

opto22/pac_display < r9.4g (2 CPE variants)

opto22/pac_project < r9.4008 (2 CPE variants)

Published Mar 25, 2019

Tracked Since Feb 18, 2026