CVE-2022-29866

The CVE-2022-29866 issue affects OPC UA .NET Standard Stack 1.04.368. A remote attacker can trigger a crafted request that causes Uncontrolled Resource Consumption, leading to memory exhaustion on the server. The vulnerability is described consistently across multiple records (NVD entry, Red Hat ...

CVE-2022-29866

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

Authentication flaw

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

Code injection

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

CVE-2022-29863

OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...

CVE-2022-29863

OPC UA .NET Standard Stack 1.04.368 is affected by CVE-2022-29863. A remote attacker can cause a server/app crash by sending a crafted message that triggers excessive memory allocation, leading to a denial of service in affected deployments. The issue is described as a memory allocation/DoS condi...

CVE-2022-29863

OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...

CVE-2022-29864

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption...

CVE-2022-29864

CVE-2022-29864 affects OPC UA .NET Standard Stack version 1.04.368. The issue is Uncontrolled Resource Consumption triggered by a large number of messages, allowing a remote attacker to cause a server crash (DoS). Documented impact is partial to full availability degradation for the targeted serv...

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

CVE-2022-29862

CVE-2022-29862 describes an infinite loop in the OPC UA .NET Standard Stack 1.04.368 that lets a remote attacker hang the application by sending a crafted message. The Red Hat/Red Hat-affiliated entry and the OSV/NVD variants corroborate the same issue, with a CVSSv3 base score of 7.5 (high) and ...

CVE-2022-29862

An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

CVE-2022-29865

The CVE-2022-29865 entry concerns the OPC UA .NET Standard Stack. The connected sources confirm a remote authentication bypass vulnerability in this stack where crafted credentials can bypass the application authentication check. The NVD entry lists an affected component (OPC UA .NET Standard Sta...

CVE-2022-29865

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...

OPC UA .NET Standard Stack 资源管理错误漏洞

NET Standard Stack is an open source C++ framework from the OPC Foundation in the United States. NET Standard Stack is an open source C++ framework used by the OPC Foundation to develop and distribute OPC UA client/server applications. A security vulnerability exists in OPC UA .NET Standard Stack...

(Pwn2Own) OPC Foundation UA .NET Standard TranslateBrowsePathsToNodeId Resource Exhaustion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TranslateBrowsePathsToNodeId method. The issue results...