This vulnerability affects Oracle Production Scheduling versions 12.2.3 through 12.2.15. It requires an attacker to have physical access to the communication segment connected to the hardware where Oracle Production Scheduling executes. The attacker does not need authentication but needs human interaction from a third party to exploit the vulnerability. If successfully exploited, the attacker can take over Oracle Production Scheduling, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates attack complexity is high, no privileges required, but user interaction is required, and the attack surface is adjacent network. Oracle has published a Critical Patch Update advisory in July 2026 covering multiple products, including Oracle Production Scheduling, but the specific patch status for this vulnerability is not explicitly stated in the advisory content provided.

Successful exploitation can lead to complete takeover of Oracle Production Scheduling, affecting confidentiality, integrity, and availability of the system. The vulnerability requires physical access to the communication segment and human interaction, which limits the ease of exploitation. The CVSS score of 7.1 reflects a high impact but with significant exploitation constraints.

Patch status is not yet confirmed from the provided advisory content. Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this specific vulnerability. It is recommended to review the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch availability and apply any relevant updates promptly. Until a patch is applied, restrict physical access to hardware communication segments and limit opportunities for required human interaction to reduce exploitation risk.