CVE-2022-44725: Incorrect Permission Assignment for Critical Resource

OPC Foundation Local Discovery Server LDS through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS running as a high-privilege user...

CVE-2021-40142: Improper Restriction of Operations within the Bounds of a Memory Buffer

In OPC Foundation Local Discovery Server LDS before 1.04.402.463, remote attackers can cause a denial of service DoS by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer...

PT-2018-6515

Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server LDS version 1.03.370 Description: The issue allows attackers to trigger a crash by placing invalid data into the configuration file, requiring an attacker to have access to the file system where the...

PT-2018-5335

Name of the Vulnerable Software and Affected Versions OPC Foundation Local Discovery Server LDS versions prior to 1.03.367 Description The issue allows local users to potentially gain privileges due to the OPC Foundation Local Discovery Server LDS being installed as a Windows Service without...

CVE-2017-11672: Unquoted Search Path or Element

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

CVE-2017-17443: Improper Input Validation

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...