What is the CVSS score of CVE-2014-0777?

CVE-2014-0777 has a CVSS 2.0 base score of 8.3 (High). CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:C. EPSS exploitation probability: 1.5%.

Ioserver Opc Server CVE-2014-0777

HIGH

Out-of-bounds Read (CWE-125)

2014-04-11 ics-cert@hq.dhs.gov

Denial Of Service Information Disclosure Buffer Overflow Ioserver Opc Server Opc Drivers

8.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:M/Au:N/C:P/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 11, 2014 - 16:55 cve.org

HIGH 8.3

DescriptionCVE.org

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted packet.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted packet. Affected products include: Ioserver Ioserver Opc Server, Ioserver Opc Drivers.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.