CVE-2015-0980

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.

Score

CVSS 2.0 9.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-03-14

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Bacnet Opc Server (Scadaengine)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03