CVE-2015-1006

A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.

• CWE-121
• CWE-119

• https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01Mitigation, Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01Mitigation, Third Party Advisory, US Government Resource

Published

May 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10054A vulnerability, which was classified as critical, was found…9.8
• CVE-2015-10055A vulnerability was found in PictureThisWebServer and classi…9.8
• CVE-2015-10056A vulnerability was found in 2071174A vinylmap. It has been …9.8
• CVE-2015-10057A vulnerability was found in Little Apps Little Software Sta…9.8
• CVE-2015-10058A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2015-10059A vulnerability has been found in s134328 Webapplication-Veg…6.1
• CVE-2015-10060A vulnerability was found in MNBikeways database and classif…9.8
• CVE-2015-10061A vulnerability was found in evandro-machado Trabalho-Web2. …9.8
• CVE-2015-10062A vulnerability, which was classified as problematic, was fo…9.8
• CVE-2015-10063A vulnerability was found in saemorris TheRadSystem and clas…9.8
• CVE-2015-10064A vulnerability was found in VictorFerraresi pokemon-databas…9.8
• CVE-2015-10065A vulnerability classified as critical was found in AenBleid…9.8