CVE-2023-2685

Summary

CVE-2023-2685 is a vulnerability affecting certain versions of AO-OPC servers. The issue lies in the lack of quotation marks around directory information for service entries, allowing potential attackers to call up unintended applications with system user privileges. This could result in a shift in user access privileges. While the exploitation is unlikely on well-maintained Windows installations requiring write access to system folders, an update is recommended to resolve the vulnerability identified in AO-OPC version 3.2.1 during an internal review.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.