Lucene search

GoogleOSV:CVE-2023-32787

HistoryMay 15, 2023 - 3:15 p.m.

CVE-2023-32787

2023-05-1515:15:12

Google

osv.dev

opc ua

legacy

java

stack

vulnerability

resource consumption

software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.4%

JSON

The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications.

CPENameOperatorVersion
ua-java-legacyeq1.03.342.0
ua-java-legacyeq1.3.343
ua-java-legacyeq1.03.340.0
ua-java-legacyeq1.4.0
ua-java-legacyeq1.3.346
ua-java-legacyeq1.3.344
ua-java-legacyeq1.4.1
ua-java-legacyeq1.3.345

Name	Operator	Version
ua-java-legacy	eq	1.03.342.0
ua-java-legacy	eq	1.3.343
ua-java-legacy	eq	1.03.340.0
ua-java-legacy	eq	1.4.0
ua-java-legacy	eq	1.3.346
ua-java-legacy	eq	1.3.344
ua-java-legacy	eq	1.4.1
ua-java-legacy	eq	1.3.345

References

files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2023-32787.pdf

github.com/OPCFoundation/UA-Java-Legacy

github.com/OPCFoundation/UA-Java-Legacy/commit/6f176f2b445a27c157f1a32f225accc9ce8873c0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.4%

JSON

Related for OSV:CVE-2023-32787