OTPulse
FeedAboutContact

IOServer Out of Bounds Read Vulnerability

Low RiskICS-CERT ICSA-14-100-01Jan 11, 2014
Summary

An out-of-bounds read vulnerability in OPC Drivers (version 1.0.20 and earlier) allows an attacker to read memory beyond intended boundaries. This could expose sensitive data stored in adjacent memory or cause denial of service through application crashes. The vulnerability is triggered through specially crafted requests to the OPC Driver service.

What this means
What could happen
An attacker with network access to an OPC Driver could read memory outside intended boundaries, potentially exposing sensitive data or causing the application to crash and interrupt data collection or control operations.
Who's at risk
Water authorities and utilities relying on OPC Drivers for SCADA/HMI data collection and process monitoring. OPC (OLE for Process Control) Drivers are commonly used to bridge legacy control systems with modern supervisory software in treatment plants, distribution networks, and electrical substations.
How it could be exploited
An attacker sends a specially crafted request to the OPC Driver service (typically port 135 or higher for OPC communications) that triggers out-of-bounds memory access, allowing the attacker to read adjacent memory regions containing sensitive information or crash the service.
Prerequisites
  • Network access to the OPC Driver service port
  • OPC Driver version 1.0.20 or earlier running and accessible
remotely exploitableno patch availableaffects data confidentiality
Exploitability
Moderate exploit probability (EPSS 2.0%)
Affected products (1)
ProductAffected VersionsFix Status
OPC Drivers: <=1.0.20≤ 1.0.20No fix (EOL)
Remediation & Mitigation
0/3
Do now
0/1
WORKAROUNDMonitor OPC Driver process for crashes or abnormal termination and establish automated restart procedures
Mitigations - no patch available
0/2
OPC Drivers: <=1.0.20 has reached End of Life. The vendor will not release a patch. Apply the following compensating controls:
HARDENINGImplement network segmentation to restrict access to OPC Driver ports to only authorized engineering workstations and control systems
HARDENINGContact the OPC Driver vendor to understand roadmap for patching this vulnerability or consider migration to alternative OPC solutions with active security support
View full CISA ICS-CERT advisory
↑↓ Navigate · Esc Close
API: /api/v1/advisories/2ffab9aa-d0d6-47b3-a4ba-a791b2d14034
IOServer Out of Bounds Read Vulnerability - OTPulse