Description
A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_builtintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-31
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw resides in the set_range_matrix_on_string_array function in the String Array Range Writing component of Systerel S2OPC. An attacker can trigger an out‑of‑bounds read that allows the process to read memory outside the intended buffer, potentially leaking internal data or destabilizing the application. The vulnerability is classified as a classic bounds‑checking error (CWE-119 and CWE-125).

Affected Systems

Any installation of Systerel S2OPC version 1.7.3 or older is affected; the product is the S2OPC OPC UA stack provided by Systerel.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate risk. EPSS data is not available, and the vulnerability is not in the CISA KEV catalog. The description notes that the attack is feasible remotely, but the impact is limited to memory disclosure or a crash rather than code execution. The risk is therefore moderate, with a realistic chance of exploitation if exposed to the public network.

Generated by OpenCVE AI on August 31, 2026 at 06:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Systerel S2OPC component to a version where the bug is fixed, once a patch is released
  • Limit the exposure of the OPC UA service by restricting network access to trusted hosts or using a firewall to block unsolicited traffic
  • Consider disabling the String Array Range Writing functionality if the feature is not required, or isolate it in a separate container or environment with stricter access controls

Generated by OpenCVE AI on August 31, 2026 at 06:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 31 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcua_types/sopc_builtintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.
Title Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds
First Time appeared Systerel
Systerel s2opc
Weaknesses CWE-119
CWE-125
CPEs cpe:2.3:a:systerel:s2opc:*:*:*:*:*:*:*:*
Vendors & Products Systerel
Systerel s2opc
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X'}

Subscriptions

Systerel S2opc
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-31T05:00:11.801Z

Reserved: 2026-08-30T07:54:43.857Z

Link: CVE-2026-82618

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-31T05:17:06.570

Modified: 2026-08-31T05:17:06.570

Link: CVE-2026-82618

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-31T06:30:05Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-125

    Out-of-bounds Read