Multiple vulnerabilities in BACnet OPC Server

Description

Multiple critical vulnerabilities have been found in BACnet OPC Server. Malicious users can exploit these vulnerabilities to execute arbitrary files and read&write local database.

Below is a complete list of vulnerabilities

1. An unknwon vulnerabilities can be exploited remotely via unknown vectors related to SOAP web interface;
2. Heap-based buffer overflow and format string vulnerability can be exploited remotely via a specially designed packet or string.

Original advisories

Related products

• BACnet-OPC-Server

CVE list

• CVE-2015-0981
  critical
• CVE-2015-0979
  critical
• CVE-2015-0980
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com