A specially crafted configuration file could be used to cause...

7.8 CVSS

Vulnerability Description

A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions prior to R9.4g, PAC Display Professional versions prior to R9.4g, OptoOPCServer version R9.4c and prior that were installed by PAC Project installer, versions prior to R9.4008, and OptoDataLink version R9.4d and prior that were installed by PAC Project installer, versions prior to R9.4008. Opto 22 suggests upgrading to the new product version as soon as possible.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-1007

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01

More from Opto 22

View All →

CVE-2025-13084

Opto 22 groov View Exposure of Sensitive Information Through Metadata

Medium 6.1

CVE-2018-14807

A stack-based buffer overflow vulnerability in Opto 22 PAC Control...

Critical 9.8

CVE-2015-1006

A vulnerable file in Opto 22 PAC Project Professional versions...

Critical 9.8

Affected Vendor

Opto 22

View all reports →

Affected Software

PAC Project Professional, PAC Project Basic, PAC Display Basic, PAC Display Professional, OptoOPCServer, OptoDataLink

Vulnerable Versions:

< R9.4008, < R9.4g, R9.4c and prior that were installed by PAC Project installer versions prior to R9.4008, R9.4d and prior that were installed by PAC Project installer versions prior to R9.4008