Buffer Overflow in Systerel S2OPC via PublishResponse Handling

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: MITRE

Description

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-06

EPSS Evaluated

N/A

NVD

CVE-2026-67867

Affected Vendors & Products

Vendor	Product	Version / Range
systerel	s2opc	1.7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in Systerel S2OPC version 1.7.3. It allows a remote attacker to cause a denial of service by exploiting the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data.

Impact Analysis

The vulnerability could lead to system crashes or service disruptions due to denial of service, potentially affecting operations that rely on S2OPC for OPC UA communication.

Hi! I’m here to help you understand CVE-2026-67867. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70