Lucene search

K
zdiDaan Keuper & Thijs Alkemade from ComputestZDI-22-1029
HistoryJul 28, 2022 - 12:00 a.m.

(Pwn2Own) Unified Automation OPC UA C++ Infinite Loop Denial-of-Service Vulnerability

2022-07-2800:00:00
Daan Keuper & Thijs Alkemade from Computest
www.zerodayinitiative.com
22

0.003 Low

EPSS

Percentile

71.2%

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certificates. A crafted certificate can force the server into an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

0.003 Low

EPSS

Percentile

71.2%

Related for ZDI-22-1029