CVE-2022-29866: Uncontrolled Resource Consumption

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...

OPC UA .NET Standard Stack 安全漏洞

NET Standard Stack is an open source C++ framework from the OPC Foundation in the United States. NET Standard Stack is an open source C++ framework from the OPC Foundation for developing and distributing OPC UA client/server applications. A security vulnerability exists in OPC UA .NET Standard...

OPC UA .NET Standard Stack 资源管理错误漏洞

NET Standard Stack is an open source C++ framework from the OPC Foundation in the United States. NET Standard Stack is an open source C++ framework used by the OPC Foundation to develop and distribute OPC UA client/server applications. A security vulnerability exists in OPC UA .NET Standard Stack...

CVE-2022-29865: Improper Authentication

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

PT-2022-7297

Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack version 1.04.368 Description The issue is related to an infinite loop in the OPC UA .NET Standard Stack, which can be triggered by a remote attacker sending a crafted message. This can cause the application to hang,...

CVE-2022-1261

Matrikon, a subsidary of Honeywell Matrikon OPC Server all versions is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges...

Design/Logic Flaw

Matrikon, a subsidary of Honeywell Matrikon OPC Server all versions is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges...

CVE-2022-1261 Matrikon OPC Server Improper Access Control

Matrikon, a subsidary of Honeywell Matrikon OPC Server all versions is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges...

CVE-2022-1261

CVE-2022-1261 affects Matrikon OPC Server (all versions). The issue is improper access control via the IPersistFile interface, allowing a low-privileged, remote attacker to cause execution of OS processes with system‑level privileges. Concrete impact described in connected documents includes remo...

CVE-2022-1261 Matrikon OPC Server Improper Access Control

Matrikon, a subsidary of Honeywell Matrikon OPC Server all versions is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges...

CVE-2022-1261: Improper Access Control

Matrikon, a subsidary of Honeywell Matrikon OPC Server all versions is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges...

PT-2022-3387

Name of the Vulnerable Software and Affected Versions Matrikon OPC Server all versions Description The issue is related to the implementation of the IPersistFile interface in the Matrikon OPC Server, which is associated with inadequate access control. This allows a low-privileged user connected t...

APT Cyber Tools Targeting ICS/SCADA Devices

Summary Actions to Take Today to Protect ICS/SCADA Devices: • Enforce multifactor authentication for all remote access to ICS networks and devices whenever possible. • Change all passwords to ICS/SCADA devices and systems on a consistent schedule, especially all default passwords, to device-uniqu...

OPC UA Legacy Java Stack Denial of Service Vulnerability

OPC UA Legacy Java Stack is a legacy support for the Java version of OPC UA from the OPC Foundation in the U.S. A denial of service vulnerability exists in OPC UA Legacy Java Stack version 2022-04-01, which stems from improper handling of a large number of message requests, and could be exploited...

Matrikon OPC Server

1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Matrikon, a subsidiary of Honeywell Equipment: Matrikon OPC Server Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote command...

Honeywell Matrikon OPC Server 访问控制错误漏洞

Honeywell Matrikon OPC Server is a powerful tool from Honeywell, Inc. to securely access your control and automation systems and open up new horizons of connectivity for other systems. An Access Control Error vulnerability exists in Honeywell Matrikon OPC Server, which stems from a restriction in...

CVE-2021-32935

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 96 and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation...

Privilege escalation

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 96 and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation...

CVE-2021-32935 Cognex In-Sight OPC Server - Deserialization of Untrusted Data

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 96 and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation...

CVE-2021-32935

CVE-2021-32935 affects Cognex In-Sight OPC Server (v5.7.4 (96) and prior). The vulnerability is Deserialization of Untrusted Data (CWE-502) in the OPC Server, allowing a remote attacker to execute system-level commands and achieve local privilege escalation. CVSS v3.1 base score 9.8 (CRITICAL) pe...