Buffer Overflow in Systerel S2OPC Client Wrapper

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: MITRE

Description

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-06

EPSS Evaluated

N/A

NVD

CVE-2026-67866

Affected Vendors & Products

Vendor	Product	Version / Range
systerel	s2opc	1.7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in Systerel S2OPC version 1.7.3. It allows a remote attacker to cause a denial of service by exploiting flaws in the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems functions within the client wrapper's DeleteMonitoredItems path.

Impact Analysis

The vulnerability could allow an attacker to disrupt the availability of the S2OPC service by triggering a buffer overflow, leading to a denial of service. This may cause the system to crash or become unresponsive.

Mitigation Strategies

Update Systerel S2OPC to a version that addresses this buffer overflow vulnerability. If an update is not available, consider disabling the affected client wrapper DeleteMonitoredItems path or restricting network access to the vulnerable component.

Hi! I’m here to help you understand CVE-2026-67866. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70