CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-33916 – OPC Foundation UA .NET Standard BrowseRequest Missing Authentication Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-33916
05 Aug 2022 — OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information. OPC UA .NET Standard Reference Server versión 1.04.368, permite a un atacante remoto causar que la aplicación acceda a información confidencial. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ... • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29863
https://notcve.org/view.php?id=CVE-2022-29863
16 Jun 2022 — OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation. OPC UA .NET Standard Stack versión 1.04.368 ,permite a un atacante remoto causar un bloqueo por medio de un mensaje diseñado que desencadena una asignación de memoria excesiva • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29863.pdf • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2022-29862
https://notcve.org/view.php?id=CVE-2022-29862
16 Jun 2022 — An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message. Un bucle infinito en OPC UA .NET Standard Stack versión 1.04.368, permite a un atacante remoto causar a la aplicación colgarse por medio de un mensaje diseñado • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29862.pdf • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0CVE-2022-29864 – OPC Foundation UA .NET Standard Resource Exhaustion Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-29864
16 Jun 2022 — OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption. OPC UA .NET Standard Stack versión 1.04.368, permite a un atacante remoto causar el bloqueo de un servidor por medio de un gran número de mensajes que desencadenan un Consumo Descontrolado de Recursos This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard.... • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29864.pdf • CWE-400: Uncontrolled Resource Consumption •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29865 – OPC Foundation UA .NET Standard Improper Input Validation Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2022-29865
16 Jun 2022 — OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials. OPC UA .NET Standard Stack permite a un atacante remoto eludir la comprobación de autenticación de la aplicación por medio de credenciales falsas diseñadas This vulnerability allows remote attackers to bypass authentication on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this vulnerability. The specific flaw exists within the... • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29865.pdf • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-29866 – OPC Foundation UA .NET Standard TranslateBrowsePathsToNodeId Resource Exhaustion Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-29866
16 Jun 2022 — OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption. OPC UA .NET Standard Stack versión 1.04.368, permite a un atacante remoto agotar los recursos de memoria de un servidor por medio de una petición diseñada que desencadena un consumo no controlado de recursos This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation U... • https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29866.pdf • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-27432
https://notcve.org/view.php?id=CVE-2021-27432
20 May 2021 — OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow. OPC Foundation UA ??.NET Standard versiones anteriores a 1.4.365.48 y OPC UA .NET Legacy, son vulnerables a una recursividad no controlada, que puede permitir a un atacante desencadenar un desbordamiento de pila • https://us-cert.cisa.gov/ics/advisories/icsa-21-133-03 • CWE-674: Uncontrolled Recursion •