OPC UA applications can allow a remote attacker to determine a Server's private key

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

GHSA-782P-53WQ-CXMJ High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

GHSA-8336-MXP6-V5H9 Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

CVE-2018-12087

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

CVE-2018-12087

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

Authorization

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

CVE-2018-12087

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

CVE-2018-12087

OPC Foundation UA Client Applications are affected by CVE-2018-12087 due to failure to validate certificates in communications without security. This allows an attacker who controls a segment of the network infrastructure to decrypt passwords, indicating a confidentiality impact. The vulnerabilit...

ABB Panel Builder 800 Stack-based Buffer Overflow (CVE-2018-10616)

A stack-based buffer overflow exists in ABB Panel Builder. The vulnerability is due to an input validation error while processing a parameter for ABB Comli OPC driver setting...

OPC UA Application Buffer Overflow Vulnerability

OPC UA applications are platform-independent, service-oriented, unified architecture applications from the OPC OLE for Process Control Foundation. A buffer overflow vulnerability exists in OPC UA applications, which can be exploited by a remote attacker with a specially crafted request to execute...

CVE-2018-12585

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service...

CVE-2018-12585

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service...

CVE-2018-12086

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

CVE-2018-12086

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

DEBIAN-CVE-2018-12086

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

Buffer overflow

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

CVE-2018-12086

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

Design/Logic Flaw

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service...

CVE-2018-12585

The CVE-2018-12585 entry concerns an XXE vulnerability in the OPC UA Java and .NET Legacy Stack that allows remote attackers to trigger a denial of service. The connected sources corroborate the same vulnerability description across multiple feeds (NVD, OSV, SUSE, etc.). The documents do not prov...