CVE-2021-29661

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...

CVE-2021-29660

CVE-2021-29660 concerns a CSRF vulnerability in Softing AG OPC Toolbox (en/cfg_setpwd.html) up to version 4.10.1.13035. An attacker can induce an Administrator to browse a URL under attacker control, enabling a reset of the administrative password. Documents consistently describe the flaw as CSRF...

CVE-2021-29660

A Cross-Site Request Forgery CSRF vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...

Softing AG OPC Toolbox 跨站请求伪造漏洞

Softing AG OPC Toolbox is an application from Softing Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and more. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site request forgery vulnerability can...

Softing AG OPC Toolbox 跨站脚本漏洞

Softing AG OPC Toolbox is an application from Softing, Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and many more platforms. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site scripting...

PT-2021-6748 · Unified Automation · Unified Automation .Net Based Opc Ua Client/Server Sdk Bundle

Name of the Vulnerable Software and Affected Versions: Unified Automation .NET based OPC UA Client/Server SDK Bundle versions V3.0.7 and prior Description: The issue is related to an uncontrolled recursion that may allow an attacker to trigger a stack overflow. It is also associated with...

Privilege Escalation

OPC UA Clients and Servers built with the OPC UA .NET Standard stack is vulnerable to privilege escalation. The vulnerability exists because that it allows a rogue application to establish a secure connection using invalid certificates...

CVE-2020-29457

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...

CVE-2020-29457

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...

Privilege escalation

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...

CVE-2020-29457

CVE-2020-29457 reports a Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 that could allow a rogue application to establish a secure connection. Connected sources describe improper certificate validation, enabling connections using invalid certificates, affecting OPC UA...

CVE-2020-29457

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...

OPC Foundation UA.NET Standard Trust Management Issue Vulnerability

OPC Foundation UA.NET Standard is a set of Unified Architecture standards from the OPC Foundation Opc Foundation for the development of OPC UA applications. A trust management issue vulnerability exists in OPC UA .NET Standard Stack 1.4.363.107, which allows an attacker to establish a connection...

CVE-2020-27295

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

Design/Logic Flaw

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27299

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27299

The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27274

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27297

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27274

Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...