CVE-2018-14807 Memory corruption in PAC Control Basic and PAC Control Professional
A stack-based buffer overflow in Opto 22 PAC Control software allows remote attackers to execute arbitrary code on industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-14807?
CVE-2018-14807 is a critical memory corruption vulnerability in Opto 22 PAC Control Basic and PAC Control Professional, published on 18 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution.
Which versions are affected by CVE-2018-14807?
It affects 1 product.
Products include Opto22 Pac Control.
How do I fix CVE-2018-14807?
No fix has been published for CVE-2018-14807 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-14807 being exploited?
There is no known exploitation of CVE-2018-14807 in the wild and no public exploit code.
Sources
Also known as GHSA-jxch-7prc-x795.