7.5

CVE-2007-1313

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control (OPC) server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the (1) IOPCSyncIO::Read, (2) IOPCSyncIO::Write, (3) IOPCServer::AddGroup, (4) IOPCServer::RemoveGroup, (5) IOPCCommon::SetClientName, and (6) IOPCGroupStateMgt::CloneGroup functions, which allow access to arbitrary memory. NOTE: the vectors might be limited to attackers with physical access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netxautomation ≫ Netxeib Version3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.44% 0.902
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/34440
http://secunia.com/advisories/24612
Vendor Advisory
http://www.kb.cert.org/vuls/id/296593
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/MIMG-6XEPXN
Third Party Advisory
US Government Resource
http://www.neutralbit.com/advisories/NB07-22.txt
http://www.securityfocus.com/archive/1/463539/100/0/threaded
http://www.securityfocus.com/bid/23059
http://www.securitytracker.com/id?1017803
http://www.vupen.com/english/advisories/2007/1038
Vendor Advisory