Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Unified Automation UaGateway — vendor-provided URL Clear all filters
TI-2023-15477 CVE-2023-32174 · GHSA-frf6-mj64-p4rr

Use after free in Unified Automation UaGateway

Priority MEDIUM 45

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01853 Published 2024-05-03 No fix listed CWE-416
TI-2023-15476 CVE-2023-32173 · GHSA-9mgj-c7cg-q4g6

XML injection in Unified Automation UaGateway

Priority LOW 28

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.01171 Published 2024-05-03 No fix listed CWE-91
TI-2023-15475 CVE-2023-32172 · GHSA-fwr2-hpwg-f69q

Use after free in Unified Automation UaGateway

Priority LOW 32

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01374 Published 2024-05-03 No fix listed CWE-416
TI-2023-15474 CVE-2023-32171 · GHSA-97p9-ff9m-h6m4

NULL pointer dereference in Unified Automation UaGateway

Priority LOW 32

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01356 Published 2024-05-03 No fix listed CWE-476
TI-2023-15473 CVE-2023-32170 · GHSA-c297-7j33-x4q3

Improper input validation in Unified Automation UaGateway

Priority MEDIUM 62

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00588 Published 2024-05-03 No fix listed CWE-20