Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high-performance wrapper/agent from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the implementation of the ImportXML function that allows an attacker to create a denial of...

Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high-performance wrapper/proxy from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the processing of client certificates that allows an attacker to create a denial of servic...

The vulnerability of the NodeManagerOpcUa object handler of the Unified Automation UaGateway software migration tool allows a attacker to execute arbitrary code.

The vulnerability of the NodeManagerOpcUa object handler in the Unified Automation UaGateway migration software lies in the possibility of exploiting memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of client certificates. When parsing the...

PT-2023-3424 · Unified Automation · Unified Automation Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to...

PT-2023-3425 · Unified Automation · Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. The specific flaw exists within th...

PT-2023-3423 · Unified Automation · Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: The issue is related to a use-after-free condition, which can be exploited by remote attackers to create a denial-of-service condition on affected installations. The...

PT-2023-23646 · Unified Automation · Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. The flaw exists within the...

(Pwn2Own) Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The specific flaw exists within the ImportCsv method. A crafted XML payload can cause a null...

PT-2023-7943 · Unified Automation · Uagateway

Name of the Vulnerable Software and Affected Versions: Unified Automation UaGateway affected versions not specified Description: This issue is a use-after-free vulnerability within the handling of NodeManagerOpcUa objects. The vulnerability allows remote attackers to execute arbitrary code on...

CVE-2022-37012

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-37013

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 with vendor rollup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of...

CVE-2022-37012

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-37013

Summary: CVE-2022-37013 affects Unified Automation OPC UA C++ Demo Server 1.7.6-537 (with vendor rollup). The root cause is in certificate handling, where a crafted certificate can force the server into an infinite loop, enabling a remote, unauthenticated denial‑of‑service. Documented by ZDI as t...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

CVE-2022-37013

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 with vendor rollup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of...

Unified Automation OPC UA C++ Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted certificate that can...

CVE-2022-37012

The CVE-2022-37012 entry affects Unified Automation OPC UA C++ Demo Server 1.7.6-537. The underlying flaw is in OpcUa_SecureListener_ProcessSessionCallRequest, where a crafted OPC UA message can cause an incorrect reference-count update, enabling a network-based denial-of-service without authenti...

PT-2022-23757 · Unified Automation · Unified Automation Opc Ua C++ Demo Server

Name of the Vulnerable Software and Affected Versions: Unified Automation OPC UA C++ Demo Server version 1.7.6-537 Description: This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific...

PT-2022-23758 · Unified Automation · Unified Automation Opc Ua C++ Demo Server

Name of the Vulnerable Software and Affected Versions: Unified Automation OPC UA C++ Demo Server version 1.7.6-537 Description: This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific...