CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-03-14

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Bacnet Opc Server (Scadaengine)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03