CVE-2015-1006
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Ba
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in R9.4006, R9.4f, R9.4c
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.
Timeline
- CVE published
- Record last updated
Affected versions
- Opto 22 PAC Project Professional
fixed in R9.4006
- Opto 22 PAC Project Basic
fixed in R9.4006
- Opto 22 PAC Display Basic
fixed in R9.4f
- Opto 22 PAC Display Professional
fixed in R9.4f
- Opto 22 OptoOPCServer
fixed in R9.4c
- Opto 22 OptoDataLink
versions prior to R9.4006