Description
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path
Published: 2026-08-05
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A buffer overflow exists in the Systerel S2OPC client wrapper implementation of DeleteMonitoredItems, specifically in the functions LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems. When a crafted DeleteMonitoredItems response is received, the overflow corrupts memory and allows a remote attacker to crash the process, resulting in a denial of service. This vulnerability is a classic buffer overflow issue where input validation is insufficient, matching CWE-120/122 vulnerability classes.

Affected Systems

Systerel S2OPC version 1.7.3 is affected. No other product or version information is provided.

Risk and Exploitability

The vulnerability permits remote exploitation without authentication. No CVSS score is available, but the absence of an EPSS rating and lack of KEV listing does not diminish the risk; attackers can easily trigger the crash by sending a malicious DeleteMonitoredItems response. Any system running the vulnerable version could be taken offline, disrupting availability of OPC UA services.

Generated by OpenCVE AI on August 5, 2026 at 23:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor supply of a patch that eliminates the buffer overflow in the DeleteMonitoredItems path, or upgrade to any Systerel S2OPC release newer than 1.7.3 which contains the fix.
  • If no patch is available, isolate the vulnerable endpoint by network segmentation or firewall rules so that only trusted internal traffic can reach the client wrapper during DeleteMonitoredItems operations.
  • As a temporary mitigation, modify the client wrapper to enforce strict input size limits on DeleteMonitoredItems messages, preventing the buffer overflow from occurring.
  • Monitor the application logs for segmentation fault events or abnormal termination patterns indicative of an exploitation attempt.

Generated by OpenCVE AI on August 5, 2026 at 23:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 23:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in Systerel S2OPC 1.7.3 Allows Remote Denial of Service
First Time appeared Systerel
Systerel s2opc
Weaknesses CWE-120
CWE-122
Vendors & Products Systerel
Systerel s2opc

Wed, 05 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path
References

Subscriptions

Systerel S2opc
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-05T22:12:08.071Z

Reserved: 2026-07-30T00:00:00.000Z

Link: CVE-2026-67866

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T23:30:04Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-122

    Heap-based Buffer Overflow