« Volver al listado

CVE-2007-1319

Estado: ModificadaAlta (10)—

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Takebishi Corporation — Devicexplorer OPC Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1319",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-19T22:19:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/24570",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.faweb.net/us/opc/1231207.html",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/926551",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-07.txt",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-08.txt",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-09.txt",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-10.txt",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-17.txt",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463537/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463546/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463550/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463556/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463559/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/23037",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1017793",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1029",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/24570",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.faweb.net/us/opc/1231207.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/926551",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-07.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-08.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-09.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-10.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.neutralbit.com/advisories/NB07-17.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463537/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463546/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463550/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463556/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/463559/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/23037",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1017793",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/1029",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control (OPC) Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE: this issue affects the (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS, and (5) SYSMAC OPC Servers."
    },
    {
      "lang": "es",
      "value": "Una Vulnerabilidad no especificada en la función IOPCServer::RemoveGroup en la interfaz OPCDA en Takebishi Electric DeviceXPlorer OLE para Process Control (OPC) Server anterior a versión 3.12 Build3, permite que los atacantes remotos ejecuten código arbitrario por medio de vectores no especificados que involucren el acceso a la memoria arbitraria. NOTA: este problema impacta a los servidores (1) HIDIC, (2) MELSEC, (3) FA-M3, (4) MODBUS y (5) SYSMAC OPC."
    }
  ],
  "lastModified": "2026-06-16T22:37:20.737",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75C6B6A1-CE30-4C10-81FC-BD4C2CB22A53",
              "versionEndIncluding": "3.12_build2"
            },
            {
              "criteria": "cpe:2.3:a:takebishi_corporation:devicexplorer_opc_server:3.12_build1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8262A7A4-244F-4308-821D-A766E3FC2879"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "evaluatorSolution": "This vulnerability is addressed in the following product update: http://www.faweb.net/us/opc/1231207.html"
}