Arbitrary File Transfer and Information Disclosure in Honeywell MatrikonOPC OPC Controller

Arbitrary File Transfer and Information Disclosure in Honeywell MatrikonOPC OPC Controller

CVE-2018-8714 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:P

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries.

Learn more about our User Device Pen Test.