Skip to content
OpenAdvisories
Medium ICSA-22-144-02 1 CVE

Matrikon OPC Server

Published May 24, 2022 · Updated May 24, 2022

Vendor: Matrikon, Honeywell Product: Matrikon OPC Server

Summary

Successful exploitation of this vulnerability could allow an attacker to achieve remote command execution with system-level privileges through the support of the IPersistFile COM interface.

Vulnerabilities 1

  • Medium 5.8
    CVE-2022-1261

    Matrikon OPC Server Improper Access Control

    Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level…

    Matrikon, a subsidiary of Honeywell Matrikon OPC Server

Revision history

  1. #1

    ICSA-22-144-02 Matrikon OPC Server

References