CVE-2007-1319

{"id": "CVE-2007-1319", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-03-19T22:19:00.000", "references": [{"url": "http://secunia.com/advisories/24570", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://www.faweb.net/us/opc/1231207.html", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/926551", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.neutralbit.com/advisories/NB07-07.txt", "source": "cret@cert.org"}, {"url": "http://www.neutralbit.com/advisories/NB07-08.txt", "source": "cret@cert.org"}, {"url": "http://www.neutralbit.com/advisories/NB07-09.txt", "source": "cret@cert.org"}, {"url": "http://www.neutralbit.com/advisories/NB07-10.txt", "source": "cret@cert.org"}, {"url": "http://www.neutralbit.com/advisories/NB07-17.txt", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/463537/100/0/threaded", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/463546/100/0/threaded", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/463550/100/0/threaded", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/463556/100/0/threaded", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/archive/1/463559/100/0/threaded", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/23037", "source": "cret@cert.org"}, {"url": "http://www.securitytracker.com/id?1017793", "source": "cret@cert.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1029", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers."}, {"lang": "es", "value": "Una Vulnerabilidad no especificada en la funci\u00f3n IOPCServer::RemoveGroup en la interfaz OPCDA en Takebishi Electric DeviceXPlorer OLE para Process Control (OPC) Server anterior a versi\u00f3n 3.12 Build3, permite que los atacantes remotos ejecuten c\u00f3digo arbitrario por medio de vectores no especificados que involucren el acceso a la memoria arbitraria. NOTA: este problema impacta a los servidores (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS y (5) SYSMAC OPC."}], "lastModified": "2018-10-16T16:37:56.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75C6B6A1-CE30-4C10-81FC-BD4C2CB22A53", "versionEndIncluding": "3.12_build2"}, {"criteria": "cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:3.12_build1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8262A7A4-244F-4308-821D-A766E3FC2879"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org", "evaluatorSolution": "This vulnerability is addressed in the following product update: http://www.faweb.net/us/opc/1231207.html"}