// For flags

CVE-2021-27434

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

Productos con el programa Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versiones V3.0.7 y anteriores (solo versiones de .NET 4.5, 4.0 y 3.5 Framework) son vulnerables a una recursividad no controlada, que puede permitir a un atacante desencadenar un desbordamiento de pila

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-02-19 CVE Reserved
  • 2021-05-20 CVE Published
  • 2024-02-03 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-674: Uncontrolled Recursion
CAPEC
References (1)
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Unified-automation
Search vendor "Unified-automation"
.net Based Opc Ua Client\/server Sdk
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk"
<= 3.0.7
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk" and version " <= 3.0.7"
-
Affected
in Microsoft
Search vendor "Microsoft"
.net Framework
Search vendor "Microsoft" for product ".net Framework"
3.5
Search vendor "Microsoft" for product ".net Framework" and version "3.5"
-
Safe
Unified-automation
Search vendor "Unified-automation"
.net Based Opc Ua Client\/server Sdk
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk"
<= 3.0.7
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk" and version " <= 3.0.7"
-
Affected
in Microsoft
Search vendor "Microsoft"
.net Framework
Search vendor "Microsoft" for product ".net Framework"
4.0
Search vendor "Microsoft" for product ".net Framework" and version "4.0"
-
Safe
Unified-automation
Search vendor "Unified-automation"
.net Based Opc Ua Client\/server Sdk
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk"
<= 3.0.7
Search vendor "Unified-automation" for product ".net Based Opc Ua Client\/server Sdk" and version " <= 3.0.7"
-
Affected
in Microsoft
Search vendor "Microsoft"
.net Framework
Search vendor "Microsoft" for product ".net Framework"
4.5
Search vendor "Microsoft" for product ".net Framework" and version "4.5"
-
Safe