CVE-2012-3008
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote...
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
- Record
CVE-2012-3008- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
- Record
CVE-2012-3008- Updated
- 2026-11-02
EUVDEUVD-2012-2986 No score
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
- Record
EUVD-2012-2986- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mm7q-fvgh-3m35 No score
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote...
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
- Record
GHSA-mm7q-fvgh-3m35- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3008 is a high vulnerability (CVSS 8.5) in Osisoft Pi Opc Da Interface, published July 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.68%, the 91st percentile. No source names a fixed version.