CVE-2018-8714

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-17 · updated 2026-06-17
Weakness: CWE-200

Description

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries.

Affected products

Honeywell Matrikonopc Explorer: before 5.1.0.0 — fixed in 5.1.0.0

How to fix

Upgrade to a fixed version: Honeywell Matrikonopc Explorer 5.1.0.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/104157
https://ics-cert.us-cert.gov/advisories/ICSA-18-130-01
https://www.opcsupport.com/s/article/SECURITY-NOTIFICATION-OPC-Explorer-SN-2017-04-27-01
http://www.securityfocus.com/bid/104157
https://ics-cert.us-cert.gov/advisories/ICSA-18-130-01
https://www.opcsupport.com/s/article/SECURITY-NOTIFICATION-OPC-Explorer-SN-2017-04-27-01

Get alerted when CVE-2018-8714 or the next vulnerability affects your stack