Unified Automation

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Unified Automation records in CISA KEV

No Unified Automation vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Uagateway · all components

TI-2023-15473 CVE-2023-32170 · GHSA-c297-7j33-x4q3

MEDIUM 62

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00588 Published 2024-05-03 No fix listed CWE-20

TI-2023-15477 CVE-2023-32174 · GHSA-frf6-mj64-p4rr

MEDIUM 45

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01853 Published 2024-05-03 No fix listed CWE-416

TI-2023-21794 CVE-2023-41185 · GHSA-m824-jj6g-vm4f

MEDIUM 40

Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00812 Published 2024-05-03 No fix listed CWE-190

TI-2023-15475 CVE-2023-32172 · GHSA-fwr2-hpwg-f69q

LOW 32

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01374 Published 2024-05-03 No fix listed CWE-416

TI-2023-15474 CVE-2023-32171 · GHSA-97p9-ff9m-h6m4

LOW 32

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01356 Published 2024-05-03 No fix listed CWE-476

TI-2023-15476 CVE-2023-32173 · GHSA-9mgj-c7cg-q4g6

LOW 28

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.01171 Published 2024-05-03 No fix listed CWE-91