Description
Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers.
References
- 20070322 [NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server mailing-list
- http://www.neutralbit.com/advisories/NB07-07.txt
- 20070322 [NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server mailing-list
- VU#926551 third-party-advisory
- http://www.neutralbit.com/advisories/NB07-17.txt
- http://www.faweb.net/us/opc/1231207.html
- http://www.neutralbit.com/advisories/NB07-08.txt
- http://www.neutralbit.com/advisories/NB07-09.txt
- ADV-2007-1029 vdb-entry
- 20070322 [NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server mailing-list
- http://www.neutralbit.com/advisories/NB07-10.txt
- 23037 vdb-entry
- 24570 third-party-advisory
- 20070322 [NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server mailing-list
- 20070322 [NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server mailing-list
- 1017793 vdb-entry