Heap-based Out-of-Bounds Write in S2OPC Server

Executive Summary

This is a heap-based out-of-bounds write vulnerability in S2OPC version 1.7.3. It occurs during server-side EventFilter handling when processing CreateMonitoredItems requests. A remote attacker could exploit this to execute arbitrary code on the affected system.

Useful 0 Not Useful 0

Impact Analysis

If you are running S2OPC 1.7.3, an attacker could exploit this flaw to gain control of your system, potentially leading to data breaches, unauthorized access, or system compromise. This could affect confidentiality, integrity, and availability of your services.

Useful 0 Not Useful 0

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. However, heap-based out-of-bounds write vulnerabilities can lead to arbitrary code execution, which may result in unauthorized data access or modification, potentially violating confidentiality and integrity requirements in GDPR and HIPAA.

Useful 0 Not Useful 0

Mitigation Strategies

Update S2OPC to a patched version beyond 1.7.3 to address the heap-based out-of-bounds write vulnerability in EventFilter handling.

Useful 0 Not Useful 0