CVE-2012-3008

EUVD-2012-2986
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
osisoftpi_opc_da_interface
𝑥
≤ 2.3.17.18
osisoftpi_opc_da_interface
2.3.16.16
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/84091
http://secunia.com/advisories/49986
http://www.securityfocus.com/bid/54609
http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77131
http://osvdb.org/84091
http://secunia.com/advisories/49986
http://www.securityfocus.com/bid/54609
http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77131