CVE-2015-1006

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-119

Affected software

No affected versions have been published.

Timeline

Published: May 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-100609.8A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/vie CVE-2015-100619.8A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown part of the file src CVE-2015-100629.8A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the c CVE-2015-100639.8A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.CVE-2015-100649.8A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an un CVE-2015-100659.8A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result of the file validato CVE-2015-100669.8A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/getByCustomQuery of t CVE-2015-100678.1A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the f CVE-2015-100689.8A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/b CVE-2015-100699.8A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function is_card_p CVE-2015-10077.8A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow re CVE-2015-100709.8A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index