« Volver al listado

CVE-2012-3008

Estado: ModificadaAlta (8.5)—

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Osisoft — PI OPC DA Interface

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3008",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-20T10:40:37.283",
  "references": [
    {
      "url": "http://osvdb.org/84091",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://secunia.com/advisories/49986",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.securityfocus.com/bid/54609",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77131",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://osvdb.org/84091",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/49986",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/54609",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/77131",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de búfer basado en pila en OSISoft PI OPC DA Interface antes de v2.3.20.9 permite ejecutar código de su elección a usuarios remotos autenticados mediante el envío de paquetes de datos durante el procesamiento de los mensajes relacionados con elementos OPC."
    }
  ],
  "lastModified": "2026-06-16T23:42:30.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:osisoft:pi_opc_da_interface:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DBD4394-46E8-44AE-B1D9-EF9DD5B81F0A",
              "versionEndIncluding": "2.3.17.18"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_opc_da_interface:2.3.16.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A5E37CC-21DC-4E93-AAC0-C11F96121178"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}