Lucene search
K

46 matches found

Github Security Blog
Github Security Blog
added 2022/06/17 9:45 p.m.32 views

Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core

A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...

7.5CVSS7.1AI score0.00628EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/06/17 9:45 p.m.18 views

GHSA-R7PQ-3X6P-7JCM Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core

A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...

7.5CVSS7.3AI score0.00628EPSS
Exploits0References4
OSV
OSV
added 2022/06/17 9:44 p.m.19 views

GHSA-FVXF-R9FW-49PC Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

A vulnerability was discovered in the OPC UA .NET Standard Stack that - allows a malicious client or server to bypass the application authentication mechanism - and allow a connection to an untrusted peer...

7.5CVSS7.6AI score0.00667EPSS
Exploits0References5
Prion
Prion
added 2022/06/16 6:15 p.m.12 views

Memory corruption

OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...

5CVSS7.3AI score0.00628EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/16 5:39 p.m.10 views

CVE-2022-29866

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...

7.6AI score0.00797EPSS
Exploits0References2
NVD
NVD
added 2022/06/16 5:15 p.m.11 views

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

7.5CVSS0.00802EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 5:15 p.m.1 views

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

7.5CVSS7.1AI score0.00802EPSS
Exploits0References3
NVD
NVD
added 2022/06/16 5:15 p.m.16 views

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

7.5CVSS0.00667EPSS
Exploits0References2
Prion
Prion
added 2022/06/16 5:15 p.m.8 views

Code injection

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

5CVSS7.3AI score0.00802EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/06/16 5:15 p.m.10 views

Authentication flaw

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

5CVSS7.6AI score0.00667EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/16 5:9 p.m.14 views

CVE-2022-29863

OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...

7.5AI score0.00628EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/06/16 5:5 p.m.14 views

CVE-2022-29864

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption...

7.6AI score0.01391EPSS
Exploits0References2
CVE
CVE
added 2022/06/16 5:5 p.m.87 views

CVE-2022-29864

CVE-2022-29864 affects OPC UA .NET Standard Stack version 1.04.368. The issue is Uncontrolled Resource Consumption triggered by a large number of messages, allowing a remote attacker to cause a server crash (DoS). Documented impact is partial to full availability degradation for the targeted serv...

7.5CVSS7.3AI score0.01391EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/16 5:1 p.m.16 views

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

7.5AI score0.00802EPSS
Exploits0References2
CVE
CVE
added 2022/06/16 5:1 p.m.85 views

CVE-2022-29862

CVE-2022-29862 describes an infinite loop in the OPC UA .NET Standard Stack 1.04.368 that lets a remote attacker hang the application by sending a crafted message. The Red Hat/Red Hat-affiliated entry and the OSV/NVD variants corroborate the same issue, with a CVSSv3 base score of 7.5 (high) and ...

7.5CVSS7.2AI score0.00802EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/16 4:50 p.m.14 views

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

7.8AI score0.00667EPSS
Exploits0References2
CVE
CVE
added 2022/06/16 4:50 p.m.81 views

CVE-2022-29865

The CVE-2022-29865 entry concerns the OPC UA .NET Standard Stack. The connected sources confirm a remote authentication bypass vulnerability in this stack where crafted credentials can bypass the application authentication check. The NVD entry lists an affected component (OPC UA .NET Standard Sta...

7.5CVSS7.5AI score0.00667EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.1 views

OPC UA .NET Standard Stack 资源管理错误漏洞

NET Standard Stack is an open source C++ framework from the OPC Foundation in the United States. NET Standard Stack is an open source C++ framework from the OPC Foundation for developing and distributing OPC UA client/server applications. A security vulnerability exists in OPC UA .NET Standard...

7.5CVSS7.4AI score0.01391EPSS
Exploits0References3
OSV
OSV
added 2021/11/19 8:19 p.m.17 views

GHSA-MJWW-934M-H4JW Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates...

4.4CVSS4.5AI score0.00132EPSS
Exploits0References6
OSV
OSV
added 2021/02/16 8:15 p.m.9 views

CVE-2020-29457

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...

4.4CVSS6.7AI score
Exploits0References3
Rows per page
Query Builder