31 matches found
CVE-2026-18784 o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow
A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...
PT-2026-67872
Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A remote attacker can cause a denial of service through the UA Client getRemoteDataTypes function. Recommendations Update to a version newer than 1.5.5. As a temporary workaround, restrict the use ...
PT-2026-67773
Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6 Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited...
PT-2026-67883
Name of the Vulnerable Software and Affected Versions open62541 version 1.5.5 Description A buffer overflow exists in the high-level attribute reading logic within the src/client/ua client highlevel.c file. This flaw allows a remote attacker to trigger a denial of service. Recommendations At the...
CVE-2026-67857
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray in src/client/uaclientconnect.c...
CVE-2026-67857
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray in src/client/uaclientconnect.c...
OPC UA Client
Connects to an OPC UA server and creates an interactive OPC UA shell session !/usr/bin/env python3 -- coding: utf-8 -- """OPC UA bind listener — opens an OPC UA session for node browsing and diagnostics.""" from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...
CVE-2026-15690 open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereference
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/uaclientconnect.c of the component Shared Client Library. Such manipulation of the argument ServerNamespaceArray leads to null pointer dereference. Th...
CVE-2026-15690
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/uaclientconnect.c of the component Shared Client Library. Such manipulation of the argument ServerNamespaceArray leads to null pointer dereference. Th...
CVE-2025-11043 Improper Server Certificate Validation in Automation Studio
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges...
CVE-2025-11043
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges...
CVE-2025-11043: Improper Certificate Validation
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges...
CVE-2019-13542
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition...
CVE-2024-5000
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size...
CVE-2024-5000: Incorrect Calculation of Buffer Size
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size...
PT-2024-33838
Name of the Vulnerable Software and Affected Versions: CODESYS products affected versions not specified Description: An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products, which can cause a Denial of Service DoS due to incorrec...
CVE-2023-7234
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field...
Design/Logic Flaw
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field...
Mitsubishi Electric MELSOFT GT OPC UA
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSOFT GT OPC UA Client Vulnerabilities: Out-of-bounds Read, Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...