CVE Vulnerability

CVE-2007-1319

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers.

10 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www.faweb.net/us/opc/1231207.html
http://www.kb.cert.org/vuls/id/926551 US Government Resource
http://www.neutralbit.com/advisories/NB07-07.txt
http://www.neutralbit.com/advisories/NB07-08.txt
http://www.neutralbit.com/advisories/NB07-09.txt
http://www.neutralbit.com/advisories/NB07-10.txt
http://www.neutralbit.com/advisories/NB07-17.txt
http://www.securityfocus.com/bid/23037
http://www.securitytracker.com/id?1017793
http://secunia.com/advisories/24570 Vendor Advisory
http://www.vupen.com/english/advisories/2007/1029 Vendor Advisory
http://www.securityfocus.com/archive/1/463559/100/0/threaded
http://www.securityfocus.com/archive/1/463556/100/0/threaded
http://www.securityfocus.com/archive/1/463550/100/0/threaded
http://www.securityfocus.com/archive/1/463546/100/0/threaded
http://www.securityfocus.com/archive/1/463537/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:3.12_build1:*:*:*:*:*:*:*
cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:*:*:*:*:*:*:*:*
Information

Published : 2007-03-19 10:19

Updated : 2018-10-16 04:37

NVD link : CVE-2007-1319

Mitre link : CVE-2007-1319

Products Affected
No products.
CWE
NVD-CWE-noinfo