Unscored severity · published Jul 20, 2012
CVE-2012-3008
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
PI Opc DA Interface · Osisoft
through 2.3.17.18; 2.3.16.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3008
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3008
osvdb.org
http://osvdb.org/84091
secunia.com
http://secunia.com/advisories/49986
www.securityfocus.com
http://www.securityfocus.com/bid/54609
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77131