Buffer Overflow Vulnerability in Systerel S2OPC Product
CVE-2026-67867

7.5HIGH

Key Information:

Vendor

Systerel

Status
S2OPC
Vendor
CVE Published:
5 August 2026

What is CVE-2026-67867?

A buffer overflow vulnerability exists in the Systerel S2OPC version 1.7.3, which could be exploited by a remote attacker. This vulnerability may allow the attacker to induce a denial of service condition by manipulating the Alarm/Conditions wrapper while processing PublishResponse EventNotificationList data. This issue emphasizes the importance of validating input data and ensuring robust error handling to mitigate potential exploitation risks.

References

https://github.com/gff-cw/information/issues/18
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.