The vulnerability of the OPC UA Client/Server SDK Bundle for client-server applications in Unified Automation .NET allows a perpetrator to disclose protected information.

🗓️ 12 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerability in Unified Automation .NET OPC UA SDK Bundle enables disclosure of information.

Reporter	Title	Published	Views	Family All 11
CNNVD	Siemens SIMATIC OPC UA 信息泄露漏洞	13 May 202100:00	–	cnnvd
CNVD	Siemens SIMATIC OPC UA Information Disclosure Vulnerability	14 May 202100:00	–	cnvd
CVE	CVE-2021-27434	20 May 202113:42	–	cve
Cvelist	CVE-2021-27434	20 May 202113:42	–	cvelist
EUVD	EUVD-2021-14188	7 Oct 202500:30	–	euvd
ICS	OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5	13 May 202100:00	–	ics
NVD	CVE-2021-27434	20 May 202114:15	–	nvd
OSV	CVE-2021-27434	20 May 202114:15	–	osv
Prion	Stack overflow	20 May 202114:15	–	prion
Positive Technologies	PT-2021-6748 · Unified Automation · Unified Automation .Net Based Opc Ua Client/Server Sdk Bundle	19 Feb 202100:00	–	ptsecurity

Vulners

Node

beckhoff_automation_gmbh_&_co._kg ts6100Range<4.3.46.0

OR

beckhoff_automation_gmbh_&_co._kg tf6100Range<4.3.46.0

OR

beckhoff_automation_gmbh_&_co._kg tf3300Range<3.4.3144.11

OR

beckhoff_automation_gmbh_&_co._kg tf6720Range<1.1.68.0

OR

unified_automation_gmbh unified_automation_.netRange≤3.0.7

Source	Link
download	www.download.beckhoff.com/download/Document/product-security/Advisories/advisory-2021-002.pdf
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-133-04
vuldb	www.vuldb.com/ru/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021051404
web	www.web.nvd.nist.gov/view/vuln/detail
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-21-133-04

12 Apr 2022 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.5

CVSS 27.8

EPSS0.01741

unified automation client server information disclosure remote disclosure security vulnerability