This vulnerability in Systerel S2OPC up to version 1.7.3 involves an out-of-bounds read in the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse within the DeleteMonitoredItemsRequest Handler component. The flaw allows local attackers with limited privileges to read memory outside the intended bounds, potentially leading to information disclosure or application instability. Exploit code has been publicly released, increasing the risk of exploitation. The vendor has not provided any response or patch at the time of this report.

The vulnerability allows a local attacker with limited privileges to perform an out-of-bounds read, which can lead to unauthorized information disclosure or cause the application to behave unexpectedly. The CVSS score of 4.8 reflects a medium severity level, indicating a moderate impact. There is no evidence of remote exploitation or privilege escalation. No known active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Since the exploit requires local access, restricting local user privileges and access to the affected system can reduce risk. Monitor for any future vendor advisories or patches and apply them promptly once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.