NVD

Id
56596  
Name
CVE-2007-4473  
Description
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-17  
Modified Date
2008-11-15  
Seq
2007-4473  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288384 56596 CVE-2007-4473 VU#205073  View
288385 56596 CVE-2007-4473 http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf  View
288386 56596 CVE-2007-4473 http://www.neutralbit.com/en/rd/opctest/  View
288387 56596 CVE-2007-4473 26876  View
288388 56596 CVE-2007-4473 easylon-server-code-execution(39062)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53848 JVNDB-2007-002540 Gesytec Easylon OPC Server におけるサービス運用妨害 (DoS) の脆弱性 Gesytec Easylon OPC Server は、サーバーハンドルを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる、脆弱性が存在します。 CVE-2007-4473 27828 CVE-2007-4473 56596 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002540.html 2007-12-17 2012-06-26 View