Vulnerability in Scadaengine Bacnet Opc Server

CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.

EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.

Affected products

Scadaengine Bacnet_opc_server
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)