Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.PTC_OPCUA_MULTI_VULNS.NBIN
HistoryMay 17, 2021 - 12:00 a.m.

PTC OPC UA Server Multiple vulnerabilities

2021-05-1700:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
19

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.016 Low

EPSS

Percentile

87.3%

An OPC UA server running on the remote host is affected by at least one of the following vulnerabilities :

  • A stack-based overflow vulnerability exists in the PTC ThingWorx Edge server due to improper validation of user-supplied data when decoding OPC UA strings. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to cause a denial of service condition or the execution of arbitrary code.
    (CVE-2020-27265)

  • A heap-based overflow vulnerability exists in the PTC ThingWorx Edge server when decoding OPC UA strings. An unauthenticated, remote attacker can exploit this to crash the server and potentially leak data. (CVE-2020-27263)

  • A use-after-free vulnerability exists in the PTC Kepware KEPServerEX server. An unauthenticated, remote attacker can exploit this to crash the server. (CVE-2020-27267)

Note that this plugin may not detect all affected devices due to the variety of affected products from multiple vendors.

Binary data ptc_opcua_multi_vulns.nbin

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.016 Low

EPSS

Percentile

87.3%

Related for PTC_OPCUA_MULTI_VULNS.NBIN