VYPR
← All advisories
Medium severity5.8NVD Advisory· Published May 26, 2022· Updated Jun 17, 2026

CVE-2022-1261

CVE-2022-1261

Description

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges.

Affected products

4
  • Honeywell/Matrikon Opc Server2 versions
    cpe:2.3:a:honeywell:matrikon_opc_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:honeywell:matrikon_opc_server:*:*:*:*:*:*:*:*
    • (no CPE)
  • Matrikon/Matrikon OPC Serverllm-create
  • Matrikon, a subsidiary of Honeywell/Matrikon OPC Serverv5
    Range: All Versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.