Buffer Overflow Vulnerability in Systerel S2OPC Product
CVE-2026-67871

7.5HIGH

Key Information:

Vendor

Systerel

Status
S2OPC
Vendor
CVE Published:
5 August 2026

What is CVE-2026-67871?

A buffer overflow vulnerability in Systerel S2OPC version 1.7.3 enables remote attackers to disrupt service availability. This flaw arises from improper handling of data in the AddNodes function, specifically within the address_space_bs.c and sopc_node_mgt_helper_internal.c files. Attackers can leverage this weakness to inject excessive data, potentially leading to a denial of service scenario.

References

https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....
https://gitlab.com/systerel/S2OPC/-/work_items/1787
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7....

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.