CVE-2026-67867

Received Received - Intake

Buffer Overflow in Systerel S2OPC via PublishResponse Handling

Publication date: 2026-08-05

Last updated on: 2026-08-06

Assigner: MITRE

Description

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-06

Generated

2026-08-16

AI Q&A

2026-08-06

EPSS Evaluated

2026-08-15

NVD

CVE-2026-67867

Affected Vendors & Products

Vendor	Product	Version / Range
systerel	s2opc	1.7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in Systerel S2OPC version 1.7.3. It allows a remote attacker to cause a denial of service by exploiting the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data.

Detection Guidance

To detect this vulnerability, monitor for crashes in S2OPC client applications when processing PublishResponse messages with manipulated EventFieldList.NoOfEventFields. Use AddressSanitizer or similar tools to catch out-of-bounds reads during event handling. Inspect logs for segmentation faults in alarm/event wrapper components.

Impact Analysis

The vulnerability could lead to system crashes or service disruptions due to denial of service, potentially affecting operations that rely on S2OPC for OPC UA communication.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability is a buffer overflow issue causing denial of service, but no details are given about data exposure or regulatory implications.

Mitigation Strategies

Update Systerel S2OPC to the latest version to address the buffer overflow issue in the Alarm/Conditions wrapper handling PublishResponse EventNotificationList data.

Hi! I’m here to help you understand CVE-2026-67867. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70