Unscored CVE-2015-0980 EUVD-2015-0988GHSA-95rx-r6wx-gg6q

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remot…

Published Mar 14, 2015 · Updated Aug 6, 2024 · Assigned by icscert

Description

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request.

Advisories 1

ICSA-15-069-03 SCADA Engine BACnet OPC Server Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03