Read the docs

Unified Automation

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Unified Automation records in CISA KEV

No Unified Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uagateway 6 records MEDIUM Opc Ua C++ Demo Server 2 records MEDIUM .net Based Opc Ua Client/server Sdk 1 record LOW

Records

9 records

TI-2023-15473 CVE-2023-32170 · GHSA-c297-7j33-x4q3

Improper input validation in Unified Automation UaGateway

Priority MEDIUM 62

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00588 Published 2024-05-03 No fix listed CWE-20
TI-2023-15477 CVE-2023-32174 · GHSA-frf6-mj64-p4rr

Use after free in Unified Automation UaGateway

Priority MEDIUM 45

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01853 Published 2024-05-03 No fix listed CWE-416
TI-2022-17218 CVE-2022-37013 · GHSA-gh4v-v2hh-g9m6

Infinite loop in Unified Automation OPC UA C++ Demo Server

Priority MEDIUM 41

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 [with vendor rollup].

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01157 Published 2023-03-29 No fix listed CWE-835
TI-2023-21794 CVE-2023-41185 · GHSA-m824-jj6g-vm4f

Integer overflow in Unified Automation UaGateway

Priority MEDIUM 40

Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00812 Published 2024-05-03 No fix listed CWE-190
TI-2023-15475 CVE-2023-32172 · GHSA-fwr2-hpwg-f69q

Use after free in Unified Automation UaGateway

Priority LOW 32

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01374 Published 2024-05-03 No fix listed CWE-416
TI-2023-15474 CVE-2023-32171 · GHSA-97p9-ff9m-h6m4

NULL pointer dereference in Unified Automation UaGateway

Priority LOW 32

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01356 Published 2024-05-03 No fix listed CWE-476
TI-2023-15476 CVE-2023-32173 · GHSA-9mgj-c7cg-q4g6

XML injection in Unified Automation UaGateway

Priority LOW 28

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.01171 Published 2024-05-03 No fix listed CWE-91
Open these records in search →