CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

Design/Logic Flaw

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

CVE-2021-40872

The CVE-2021-40872 issue affects Softing Industrial Automation uaToolkit Embedded prior to version 1.40. Affected component: the OPC/UA server implemented by uaToolkit Embedded. Root cause: invalid type cast leading to server process crash on crafted messages. Impact: remote attacker can cause a ...

CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

CVE-2021-40872: Access of Resource Using Incompatible Type

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

PT-2021-22996

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation uaToolkit Embedded versions prior to 1.40 Description An issue allows remote attackers to cause a denial of service DoS or login as an anonymous user by sending crafted messages to an OPC/UA server. The server...

CVE-2021-34594

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system...

Path traversal

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system...

CVE-2021-34594 Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system...

CVE-2021-34594

The CVE-2021-34594 affects Beckhoff TwinCAT OPC UA Server (TF6100/TS6100) prior to 4.3.48.0 or TcOpcUaServer prior to 3.2.0.194. It allows a relative path traversal that can create or delete arbitrary files on the system. Impact per the NVD metadata: integrity and availability HIGH, confidentiali...

CVE-2021-34594: Relative Path Traversal

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system...

PT-2021-5340

Name of the Vulnerable Software and Affected Versions TwinCAT OPC UA Server versions prior to 4.3.48.0 TwinCAT OPC UA Server with TcOpcUaServer versions below 3.2.0.194 Description The issue is related to errors in processing relative paths to directories. Exploitation of this issue may allow a...

PTC OPC UA Server Multiple vulnerabilities

Binary data ptcopcuamultivulns.nbin...

Design/Logic Flaw

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

CVE-2020-12526

Affected software: Beckhoff TwinCAT OPC UA Server (versions up to 2.3.0.12) and IPC Diagnostics UA Server (versions up to 3.1.0.1). Issue: denial-of-service vulnerability where several specially crafted requests to the running OPC UA server can cause the server to stop responding to any client, w...

CVE-2020-12526: Improper Input Validation

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

PT-2021-5257

Name of the Vulnerable Software and Affected Versions TwinCAT OPC UA Server versions up to 2.3.0.12 IPC Diagnostics UA Server versions up to 3.1.0.1 Description The issue exists due to insufficient input validation, allowing a remote attacker to cause a denial of service. This can be achieved by...

Honeywell OPC UA Tunneller 输入验证错误漏洞

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. A security vulnerability exists in Honeywell OPC UA Tunneller. An attacker could use this vulnerability to cause a denial of service. The following products and versions ar...

PT-2021-27745

Name of the Vulnerable Software and Affected Versions: OPC UA Stack versions affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The crash i...