Vulnerabilities

TI-2023-21794 CVE-2023-41185 · GHSA-m824-jj6g-vm4f

Integer overflow in Unified Automation UaGateway

MEDIUM 40

Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00812 Published 2024-05-03 No fix listed CWE-190

TI-2023-15477 CVE-2023-32174 · GHSA-frf6-mj64-p4rr

MEDIUM 45

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01853 Published 2024-05-03 No fix listed CWE-416

TI-2023-15476 CVE-2023-32173 · GHSA-9mgj-c7cg-q4g6

LOW 28

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.01171 Published 2024-05-03 No fix listed CWE-91

TI-2023-15475 CVE-2023-32172 · GHSA-fwr2-hpwg-f69q

LOW 32

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01374 Published 2024-05-03 No fix listed CWE-416

TI-2023-15474 CVE-2023-32171 · GHSA-97p9-ff9m-h6m4

LOW 32

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01356 Published 2024-05-03 No fix listed CWE-476

TI-2023-15473 CVE-2023-32170 · GHSA-c297-7j33-x4q3

MEDIUM 62

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00588 Published 2024-05-03 No fix listed CWE-20