Lucene search

IcscertCVE-2021-27432

HistoryMay 20, 2021 - 4:15 p.m.

CVE-2021-27432

2021-05-2016:15:07

CWE-674

icscert

web.nvd.nist.gov

cve-2021-27432

opc foundation

ua .net standard

opc ua .net legacy

uncontrolled recursion

stack overflow

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.4%

JSON

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

Affected configurations

Nvd

Node

opcfoundationua-.net-legacyMatch-

opcfoundationua_.net_standard_stackRange<1.4.365.48

VendorProductVersionCPE
opcfoundationua-.net-legacy-cpe:2.3:a:opcfoundation:ua-.net-legacy:-:*:*:*:*:*:*:*
opcfoundationua_.net_standard_stack*cpe:2.3:a:opcfoundation:ua_.net_standard_stack:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opcfoundation	ua-.net-legacy	-	cpe:2.3:a:opcfoundation:ua-.net-legacy:-:::::::*
opcfoundation	ua_.net_standard_stack	*	cpe:2.3:a:opcfoundation:ua_.net_standard_stack::::::::

CNA Affected

[
  {
    "product": "OPC Foundation OPC UA .NET Standard and OPC UA .NET Legacy",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OPC UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-133-03

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.4%

JSON

Related for CVE-2021-27432