CVE-2025-1468

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy...

CVE-2025-1468 CODESYS Control V3 - OPC UA Server Authentication bypass

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy...

CVE-2025-1468 CODESYS Control V3 - OPC UA Server Authentication bypass

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy...

CVE-2025-1468

CVE-2025-1468 affects CODESYS Control V3 – OPC UA Server. An unauthenticated remote attacker can access sensitive information, including authentication data, when the server uses the non-default Basic128Rsa15 security policy. Impact is information disclosure (CVSS 3.1 base score 7.5; NETWORK, LOW...

CVE-2025-1468: Observable Discrepancy

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy...

PT-2025-11586

Name of the Vulnerable Software and Affected Versions CODESYS OPC UA Server affected versions not specified Description An unauthenticated remote attacker can gain access to sensitive information, including authentication information, when using CODESYS OPC UA Server with a non-default security...

CVE-2024-10490

An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...

CVE-2024-10490 Authentication bypass flaw in several mapp components

An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...

CVE-2024-10490

The CVE-2024-10490 issue affects B&R mapp Cockpit, View, Services, Motion, and Vision prior to version 6.0, due to an Authentication Bypass in the OPC UA Server configuration. The root cause is an authentication bypass that can be triggered by an unauthenticated network-based attacker, potentiall...

CVE-2024-10490 Authentication bypass flaw in several mapp components

An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...

CVE-2024-10490: Authentication Bypass Using an Alternate Path or Channel

An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...

CVE-2023-52891

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.5, SIMATIC Energy Manager PRO All versions V7.5, SIMATIC IPC DiagBase All versions, SIMATIC IPC DiagMonitor All versions, SIMIT V10 All versions, SIMIT V11 All versions V11.1. Unified Automation .NET based OPC UA...

CVE-2023-52891

CVE-2023-52891 affects Siemens products: SIMATIC Energy Manager Basic/PRO (before V7.5), SIMATIC IPC DiagBase/DiagMonitor, SIMIT V10, V11 (before 11.1), and uses Unified Automation .NET OPC UA Server SDK before 3.2.2. Root cause: Improperly Controlled Sequential Memory Allocation (CWE-1325). Impa...

CVE-2023-52891

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.5, SIMATIC Energy Manager PRO All versions V7.5, SIMATIC IPC DiagBase All versions, SIMATIC IPC DiagMonitor All versions, SIMIT V10 All versions, SIMIT V11 All versions V11.1. Unified Automation .NET based OPC UA...

PT-2024-8119

Name of the Vulnerable Software and Affected Versions: SIMATIC Energy Manager Basic versions prior to V7.5 SIMATIC Energy Manager PRO versions prior to V7.5 SIMATIC IPC DiagBase affected versions not specified SIMATIC IPC DiagMonitor affected versions not specified SIMIT V10 affected versions not...

CVE-2023-52891: Improperly Controlled Sequential Memory Allocation

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.5, SIMATIC Energy Manager PRO All versions V7.5, SIMATIC IPC DiagBase All versions, SIMATIC IPC DiagMonitor All versions, SIMIT V10 All versions, SIMIT V11 All versions V11.1. Unified Automation .NET based OPC UA...

CVE-2023-32172

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The...

CVE-2023-32172

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The...

CVE-2023-27336

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this...

CVE-2023-32171 Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this...