Skip to main content

Systerel S2OPC CVE-2026-78049

| EUVDEUVD-2026-64599 LOW
Out-of-bounds Read (CWE-125)
2026-08-22 VulDB GHSA-cq93-frxj-593v
Information Disclosure Buffer Overflow S2Opc
2.9
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
2.9 MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
3.7 LOW

Network-reachable without auth but AC:H due to precise protocol crafting required; impact limited to low availability, no C or I impact per CVSS 4.0 source.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

4
Severity Changed
Aug 22, 2026 - 23:22 NVD
MEDIUM LOW
CVSS changed
Aug 22, 2026 - 23:22 NVD
6.3 (MEDIUM) 2.9 (LOW)
Analysis Generated
Aug 22, 2026 - 23:16 vuln.today
CVE Published
Aug 22, 2026 - 22:30 cve.org
MEDIUM 6.3

DescriptionCVE.org

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

AnalysisAI

Out-of-bounds read in S2OPC's AddNodes service allows remote attackers to trigger memory read violations via a crafted UserAccessLevel argument, causing low-severity availability impact on vulnerable server instances running version 1.7.3 and earlier. The flaw resides in SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes within the address space management layer of this OPC UA stack, which is deployed primarily in industrial automation and ICS/SCADA environments. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed OPC UA server running S2OPC ≤1.7.3
Delivery
Craft malformed AddNodes request with invalid UserAccessLevel
Exploit
Send request to AddNodes service endpoint
Execution
Trigger out-of-bounds read in address space handler
Impact
Cause server availability disruption
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target must be running an S2OPC server instance in a mode where the AddNodes Node Management service is accessible to remote clients - this is a standard but not universally enabled OPC UA service. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P) scores 6.3, reflecting network reachability without authentication but with high attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario A remote attacker with knowledge of OPC UA protocol internals sends a crafted AddNodes service request to an S2OPC server running version 1.7.3 or earlier, constructing a malformed UserAccessLevel field designed to trigger the out-of-bounds read in SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes. The resulting memory read can cause the server process to crash (low availability impact) or potentially expose adjacent memory content depending on runtime memory layout. …
Remediation Apply the upstream fix via GitLab merge request !1826 (commit aafbd37d381b618312ebdf5ddf57027f62c14fdd at https://gitlab.com/systerel/S2OPC/-/commit/aafbd37d381b618312ebdf5ddf57027f62c14fdd). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in S2Opc

View all
CVE-2026-9758 HIGH
7.3 Jun 10

Improper certificate trust validation in Systerel S2OPC allows remote attackers to have well-formed but untrusted X.509

CVE-2026-18790 LOW POC
1.9 Aug 04

Out-of-bounds read in Systerel S2OPC versions 1.7.0 through 1.7.3 allows a local, low-privileged attacker to disrupt the
CVE-2026-18257 MEDIUM
5.6 Jul 29

Certificate trust bypass in S2OPC versions 1.5.0 through 1.x (prior to 2.0.0) allows a remote attacker to have certifica
CVE-2026-6899 MEDIUM
5.6 Jun 09

Improper certificate revocation checking in S2OPC's CycloneCrypto wrapper permits OPC UA connections authenticated with

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-78049 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy