PT-2018-5337

Name of the Vulnerable Software and Affected Versions OPC Foundation DLLs affected versions not specified Description The issue concerns the potential replacement of unsigned DLLs distributed by the OPC Foundation with malicious code. Recommendations At the moment, there is no information about a...

CVE-2017-12070: Improper Input Validation

Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code...

CVE-2017-11672

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

Design/Logic Flaw

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

Design/Logic Flaw

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...

CVE-2018-7559

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

CVE-2018-7559

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

Code injection

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

CVE-2017-17443

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...

CVE-2017-11672

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

CVE-2017-11672

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

CVE-2017-17443

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...

CVE-2018-7559

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

CVE-2018-7559

The CVE-2018-7559 issue affects OPC UA .NET Standard/Legacy Stack and Sample Code, where remote attackers can determine a server’s private key by sending specially crafted bad UserIdentityTokens as part of an oracle attack. Public details reference GitHub commits before 2018-04-12 (Standard) and ...

CVE-2018-7559

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

CVE-2017-17443

The CVE-2017-17443 entry concerns OPC Foundation Local Discovery Server (LDS) 1.03.370. A security update is required to address vulnerabilities that allow an attacker with local file-system access to place invalid data in the configuration file, causing the LDS to crash or become unavailable unt...

CVE-2017-11672

The CVE-2017-11672 entry concerns the OPC Foundation Local Discovery Server (LDS) prior to 1.03.367. Root cause: the Windows service for opcualds.exe is registered without surrounding the executable path in quotes, which can allow a local user to gain privileges. Impact is privilege escalation fo...

Rockwell Automation RSLinx Classic / FactoryTalk Linx Gateway Privilege Escalation

Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway Privilege Escalation Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell Automation RSLinx Classic 3.90.01 Rockwell Automation RSLinx Classic 3.73.00 Rockwell Automation...

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Author: LiquidWorm Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell Automation RSLinx Classic 3.90.01...

PT-2018-6515

Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server LDS version 1.03.370 Description: The issue allows attackers to trigger a crash by placing invalid data into the configuration file, requiring an attacker to have access to the file system where the...