CVE-2018-8714: Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a h...

Security readout for executives and security teams

This issue affects Honeywell MatrikonOPC OPC Controller versions before 5.1.0.0. A local user on the host could transfer arbitrary files and potentially obtain sensitive information. The public bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely on systems running Honeywell MatrikonOPC OPC Controller before 5.1.0.0, especially where multiple local users or service accounts can access OPC hosts. Treat this as a targeted operational technology hygiene issue. It is not currently evidenced as actively exploited, but affected OPC hosts may contain sensitive process or configuration data. Mitigation focus: Confirm installed MatrikonOPC OPC Controller versions across OT and engineering workstations.; Review Honeywell or MatrikonOPC guidance for the fixed 5.1.0.0 release path.; Upgrade affected installations to 5.1.0.0 or later where vendor guidance supports it..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.