CVE-2007-4473
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows...
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
Exploit likelihood
What each source reports
NVD Score used
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
- Record
CVE-2007-4473- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
- Record
CVE-2007-4473- Updated
- 2026-11-02
EUVDEUVD-2007-4456 No score
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
- Record
EUVD-2007-4456- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h5qf-mmv4-97gc No score
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows...
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
- Record
GHSA-h5qf-mmv4-97gc- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4473 is a high vulnerability (CVSS 10.0) in Gesytec Easylon Opc Server, published December 17, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.69%, the 93rd percentile. No source names a fixed version.
References
secunia.com/advisories/28079
neutralbit.com/en/rd/opctest
osvdb.org/42650
securityfocus.com/bid/26876
kb.cert.org/vuls/id/205073
exchange.xforce.ibmcloud.com/vulnerabilities/39062
nvd.nist.gov/vuln/detail/CVE-2007-4473
github.com/advisories/GHSA-h5qf-mmv4-97gc