Read the docs

Opcua Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Opcua Project records in CISA KEV

No Opcua Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

TI-2022-09458 CVE-2022-25903 · GHSA-hgxq-hcrm-c5pm

Denial of service (DoS) in opcua

Priority LOW 36

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message si…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01428 Published 2022-08-24 Fixed in 0.11.0 CWE-787
TI-2022-09445 CVE-2022-25888 · GHSA-8mx2-gqx9-rm7f

Denial of service (DoS) in opcua

Priority LOW 36

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01321 Published 2022-08-23 Fixed in 0.11.0 CWE-770
TI-2022-08997 CVE-2022-25304 · GHSA-mfpj-3qhm-976m

Denial of service (DoS) in opcua

Priority LOW 36

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01374 Published 2022-08-23 Fixed in 0.9.96 CWE-770
Open these records in search →