Approved changes feed: RSS · Atom
cpe:2.3:a:systerel:s2opc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Systerel (8636a7fd-5221-5cee-97aa-d9688169ed0e) |
|---|---|
| Product | S2Opc (71e83eb9-e314-5cd4-8b96-24b68dcf4ea7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18257 |
vulnerable | 2026-09-16 04:34:01.855760 |
Improper Certificate Validation in S2OPC
MEDIUM (5.6)
Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate issued by this root issuer to be considered trusted
Published: 2026-07-29T16:34:09.688Z
Updated: 2026-07-29T18:04:53.132Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18790 |
vulnerable | 2026-09-16 04:34:01.806635 |
Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds
LOW (3.3)
A weakness has been identified in Systerel S2OPC up to 1.7.3. This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of the file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of the component DeleteMonitoredItemsRequest Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-04T17:30:09.393Z
Updated: 2026-08-04T19:51:41.975Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90782 |
vulnerable | 2026-09-16 04:33:05.279206 |
S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
MEDIUM (5.3)
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.
Published: 2026-09-13T12:22:01.806Z
Updated: 2026-09-14T17:26:08.686Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9758 |
vulnerable | 2026-07-29 01:12:09.634193 |
Improper Certificate Validation in S2OPC
HIGH (7.3)
Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted
Published: 2026-06-10T12:32:39.183Z
Updated: 2026-06-10T13:54:59.235Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6899 |
vulnerable | 2026-07-29 01:06:21.307789 |
Improper Check for Certificate Revocation in S2OPC
MEDIUM (5.6)
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.
Published: 2026-06-09T08:39:00.495Z
Updated: 2026-06-09T14:25:59.888Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.