1641 matches found
CVE-2022-25231 Denial of Service (DoS)
The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit...
CVE-2022-25231
The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit...
CVE-2022-25302
CVE-2022-25302 affects the asneg/opcuastack package. The vulnerability arises from a missing handler for failed casting when unvalidated data is forwarded to boost::get in OpcUaNodeIdBase.h, enabling a Denial of Service via a specially crafted OPC UA message with a encoded NodeId. NVD lists CVSSv...
CVE-2022-33916
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information...
Information disclosure
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information...
CVE-2022-33916
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information...
CVE-2022-33916
The CVE-2022-33916 entry concerns OPC UA .NET Standard Reference Server version 1.04.368. The information-disclosure issue allows a remote attacker to cause the application to reveal sensitive information. Affected component is OPC UA .NET Standard Reference Server; root cause is improper access ...
CVE-2022-33916
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information...
node-opcua 资源管理错误漏洞
node-opcua is a French Sterfive SAS open source implementation of an OPC UA stack written entirely in Typescript for NodeJS. A security vulnerability exists in versions of node-opcua prior to 2.74.0, which stems from the lack of a limit on the number of received blocks total number per session or...
OPC UA .NET Standard Reference Server 安全漏洞
OPC UA .NET Standard Reference Server is a dedicated server from the OPC Foundation of America used during the development and testing of the Unified Architecture UA CTT Compliance Test Tool. A security vulnerability exists in OPC UA .NET Standard Reference Server version 1.04.368. A remote...
PT-2022-4450 · Opcua · Opcua
Name of the Vulnerable Software and Affected Versions: opcua versions 0.0.0 and later Description: The issue is related to a Denial of Service DoS due to a missing limitation on the number of received chunks per single session or in total for all concurrent sessions. An attacker can exploit this ...
CVE-2022-25302: Undefined Security Weakness
All versions of package asneg/opcuastack are vulnerable to Denial of Service DoS due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in OpcUaNodeIdBase.h. Exploiting this vulnerability is possible when sending a specifically crafted OPC UA message...
CVE-2022-25231: Allocation of Resources Without Limits or Throttling
The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit...
CVE-2022-33916: Undefined Security Weakness
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information...
(Pwn2Own) Softing Secure Integration Server OPC UA Messages NULL Pointer Dereference Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing Secure Integration Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the the handling of OPC UA messages. The issue results...
Denial of Service (DoS)
Overview opcua is an OPC UA server / client API implementation for Rust. Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit thi...
@frangoteam/fuxa (>=1.1.7, <=1.1.8), @hive-command/discovery-server (>=1.3.2-alpha.86, <=1.3.3-alpha.35) +19 more potentially affected by CVE-2022-25231 via node-opcua (>=2.1.9, <=2.73.1)
node-opcua NPM version =2.1.9, =1.1.7, =1.3.2-alpha.86, =1.3.6-alpha.36, =1.3.5, =0.0.3, =0.0.3, =0.0.2, =1.3.0-alpha.0, =0.8.0, =2.10.0, =2.10.0, =4.0.0, =1.0.0, =0.2.93, =0.2.286 and more Source cves: CVE-2022-25231 Source advisory: SNYK:JS-NODEOPCUA-2988724...
Denial of Service (DoS)
Overview node-opcua is an implementation of a OPC UA stack fully written in javascript and nodejs Affected versions of this package are vulnerable to Denial of Service DoS by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds t...
