PatchSiren cyber security CVE debrief

CVE-2026-67867 Systerel CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-05T23:16:53.997Z and has not been modified since then. CVE-2026-67867 is a Buffer Overflow vulnerability in Systerel S2OPC 1.7.3. This vulnerability allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data. Users of Systerel S2OPC 1.7.3 should verify their installations for potential buffer overflow vulnerabilities, especially in Alarm/Conditions wrapper processing. Evidence is limited; official CVE and NVD records provide minimal detail.

Vendor: Systerel
Product: S2OPC
CVSS: HIGH 7.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-08-05
Original CVE updated: 2026-08-31
Advisory published: 2026-08-05
Advisory updated: 2026-08-31

Who should care

Users of Systerel S2OPC 1.7.3, operators, platform administrators, vulnerability management teams, and security teams should verify their installations for potential buffer overflow vulnerabilities, especially in Alarm/Conditions wrapper processing. This vulnerability allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data. Affected deployments should be identified and prioritized for remediation.

Technical summary

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data. The vulnerability is located in the Alarm/Conditions wrapper processing of PublishResponse EventNotificationList data. Affected deployments should be identified and prioritized for remediation. Users should verify S2OPC 1.7.3 installations for potential buffer overflow vulnerabilities, especially in Alarm/Conditions wrapper processing.

Defensive priority

Verify S2OPC 1.7.3 installations for potential buffer overflow vulnerabilities, especially in Alarm/Conditions wrapper processing.

Recommended defensive actions

Verify S2OPC 1.7.3 installations for potential buffer overflow vulnerabilities
Monitor Alarm/Conditions wrapper processing for unusual activity
Review compensating controls for exposed systems while remediation is scheduled and verified
Check relevant monitoring, detection, and logs for exposed assets that need extra review
Track exceptions, retest remediated assets, and close the item only after evidence is documented
Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

Evidence is limited; official CVE and NVD records provide minimal detail. Defensive verification tasks are recommended. Users should verify S2OPC 1.7.3 installations for potential buffer overflow vulnerabilities, especially in Alarm/Conditions wrapper processing. Evidence grounding suggests focusing on Alarm/Conditions wrapper processing for potential buffer overflow vulnerabilities.

Sources and references

Verified primary and authoritative sources

CVE-2026-67867 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-67867

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-67867 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-67867

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://github.com/gff-cw/information/issues/18

[email protected]
Source reference
Unverified legacy reference

URL: https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/address_space/sopc_event_manager.c

[email protected]
Source reference
Unverified legacy reference

URL: https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/frontend/client_wrapper/alarm_conditions/libs2opc_client_alarm_conditions.c

[email protected]
Source reference
Unverified legacy reference

URL: https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/frontend/client_wrapper/internal/state_machine.c

[email protected]
Source reference
Unverified legacy reference

URL: https://gitlab.com/systerel/S2OPC/-/work_items/1781

[email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.