Read the docs

Freeopcua

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Freeopcua records in CISA KEV

No Freeopcua vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Opcua-asyncio 2 records HIGH Freeopcua 1 record LOW

Records

3 records

TI-2023-11375 CVE-2023-26151 · GHSA-gfvq-mxw3-mfq3

Uncontrolled resource consumption in asyncua

Priority HIGH 72

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2023-10-03 Fixed in 0.9.96 CWE-400
TI-2023-11374 CVE-2023-26150 · GHSA-2894-qcqf-g23g

Improper authentication in asyncua

Priority HIGH 72

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2023-10-03 Fixed in 0.9.96 CWE-287
TI-2022-08179 CVE-2022-24298 · GHSA-3448-h4p5-g6mc

Denial of service (DoS) in FreeOpcUa/freeopcua

Priority LOW 35

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00938 Published 2022-08-23 No fix listed CWE-770
Open these records in search →