OPC Foundation

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

OPC Foundation records in CISA KEV

No OPC Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ua .net Standard Stack 9 records MEDIUM Ua-.netstandard 6 records MEDIUM Ua-.net-legacy 5 records MEDIUM Local Discovery Server 3 records LOW Ua-java 2 records LOW Unified Architecture .net-standard 2 records MEDIUM Local Discover Server 1 record LOW Netstandard.opc.ua 1 record LOW

Records

6 records in Ua-.netstandard · all components

TI-2023-12056 CVE-2023-27321 · GHSA-vpf7-r2fv-75m9

Uncontrolled resource consumption in OPC Foundation UA .NET Standard

MEDIUM 41

OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01047 Published 2024-05-07 Fixed in 1.4.371.86 CWE-400

TI-2019-13805 CVE-2019-19135 · GHSA-pq4w-qm9g-qx68

In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create…

LOW 35

In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encry…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01043 Published 2020-03-16 Fixed in 0.3.6 CWE-330

TI-2023-14784 CVE-2023-31048 · GHSA-4cvp-hr63-822j

The OPC UA .NET Standard Reference Server before 1.4.371.86.

LOW 31

The OPC UA .NET Standard Reference Server before 1.4.371.86.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00794 Published 2023-12-12 Fixed in 1.4.371.86 CWE-209

TI-2018-05465 CVE-2018-7559 · GHSA-gr4c-5rq6-cgh3

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub…

LOW 26

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01149 Published 2018-06-13 Fixed in 1.3.352.12 CWE-320

TI-2018-08667 CVE-2018-12087 · GHSA-8336-mxp6-v5h9

Failure to validate certificates in OPC Foundation UA Client Applications communicating…

LOW 24

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

CVSS 3.0MEDIUM 5.3 Physical No auth No interaction EPSS 0.00286 Published 2018-10-03 Fixed in 1.4.353.15 CWE-295

TI-2020-17691 CVE-2020-29457 · GHSA-mjww-934m-h4jw

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow…

LOW 20

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00311 Published 2021-02-16 Fixed in 1.4.365.10 CWE-295

Open these records in search →