Vulnerability Description
The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Scadaengine | Bacnet Opc Server | <= 2.1.359.22 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-069-03Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2015-0981?
CVE-2015-0981 is a vulnerability with a CVSS score of 7.5 (HIGH). The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors.
How severe is CVE-2015-0981?
CVE-2015-0981 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0981?
Check the references section above for vendor advisories and patch information. Affected products include: Scadaengine Bacnet Opc Server.