Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Freeopcua Clear all filters
TI-2023-11374 CVE-2023-26150 · GHSA-2894-qcqf-g23g

Improper authentication in asyncua

Priority HIGH 72

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2023-10-03 Fixed in 0.9.96 CWE-287
TI-2023-11375 CVE-2023-26151 · GHSA-gfvq-mxw3-mfq3

Uncontrolled resource consumption in asyncua

Priority HIGH 72

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01175 Published 2023-10-03 Fixed in 0.9.96 CWE-400
TI-2022-08179 CVE-2022-24298 · GHSA-3448-h4p5-g6mc

Denial of service (DoS) in FreeOpcUa/freeopcua

Priority LOW 35

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00938 Published 2022-08-23 No fix listed CWE-770