46 matches found
Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-R7PQ-3X6P-7JCM Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-FVXF-R9FW-49PC Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that - allows a malicious client or server to bypass the application authentication mechanism - and allow a connection to an untrusted peer...
Memory corruption
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29865
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
Code injection
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
Authentication flaw
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
CVE-2022-29863
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...
CVE-2022-29864
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption...
CVE-2022-29864
CVE-2022-29864 affects OPC UA .NET Standard Stack version 1.04.368. The issue is Uncontrolled Resource Consumption triggered by a large number of messages, allowing a remote attacker to cause a server crash (DoS). Documented impact is partial to full availability degradation for the targeted serv...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29862
CVE-2022-29862 describes an infinite loop in the OPC UA .NET Standard Stack 1.04.368 that lets a remote attacker hang the application by sending a crafted message. The Red Hat/Red Hat-affiliated entry and the OSV/NVD variants corroborate the same issue, with a CVSSv3 base score of 7.5 (high) and ...
CVE-2022-29865
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
CVE-2022-29865
The CVE-2022-29865 entry concerns the OPC UA .NET Standard Stack. The connected sources confirm a remote authentication bypass vulnerability in this stack where crafted credentials can bypass the application authentication check. The NVD entry lists an affected component (OPC UA .NET Standard Sta...
OPC UA .NET Standard Stack 资源管理错误漏洞
NET Standard Stack is an open source C++ framework from the OPC Foundation in the United States. NET Standard Stack is an open source C++ framework from the OPC Foundation for developing and distributing OPC UA client/server applications. A security vulnerability exists in OPC UA .NET Standard...
GHSA-MJWW-934M-H4JW Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...