What’s Vulnerable › Vulnerabilities

CVE-2012-3008

• Severity: high (CVSS 8.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-20 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.

Affected products

• OSIsoft Pi Opc Da Interface: through 2.3.17.18; 2.3.16.16

References

• http://osvdb.org/84091
• http://secunia.com/advisories/49986
• http://www.securityfocus.com/bid/54609
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77131
• http://osvdb.org/84091
• http://secunia.com/advisories/49986
• http://www.securityfocus.com/bid/54609
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-201-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77131

Get alerted when CVE-2012-3008 or the next vulnerability affects your stack