Vulnerabilities

TI-2023-21794 CVE-2023-41185 · GHSA-m824-jj6g-vm4f

Integer overflow in Unified Automation UaGateway

MEDIUM 40

Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00812 Published 2024-05-03 No fix listed CWE-190

TI-2023-15477 CVE-2023-32174 · GHSA-frf6-mj64-p4rr

Use after free in Unified Automation UaGateway

MEDIUM 45

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01853 Published 2024-05-03 No fix listed CWE-416

TI-2023-15476 CVE-2023-32173 · GHSA-9mgj-c7cg-q4g6

XML injection in Unified Automation UaGateway

LOW 28

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.01171 Published 2024-05-03 No fix listed CWE-91

TI-2023-15475 CVE-2023-32172 · GHSA-fwr2-hpwg-f69q

Use after free in Unified Automation UaGateway

LOW 32

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01374 Published 2024-05-03 No fix listed CWE-416

TI-2023-15474 CVE-2023-32171 · GHSA-97p9-ff9m-h6m4

NULL pointer dereference in Unified Automation UaGateway

LOW 32

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01356 Published 2024-05-03 No fix listed CWE-476

TI-2023-15473 CVE-2023-32170 · GHSA-c297-7j33-x4q3

Improper input validation in Unified Automation UaGateway

MEDIUM 62

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00588 Published 2024-05-03 No fix listed CWE-20

TI-2022-17218 CVE-2022-37013 · GHSA-gh4v-v2hh-g9m6

Infinite loop in Unified Automation OPC UA C++ Demo Server

MEDIUM 41

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 [with vendor rollup].

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01157 Published 2023-03-29 No fix listed CWE-835

TI-2022-17217 CVE-2022-37012 · GHSA-5xp2-x7qr-wjrx

This vulnerability allows remote attackers to create a denial-of-service condition on…

MEDIUM 42

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0178 Published 2023-03-29 No fix listed CWE-911

TI-2021-08923 CVE-2021-27434 · GHSA-43g9-fmq9-jjpm

Information disclosure in OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5

LOW 36

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an atta…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01741 Published 2021-05-20 No fix listed CWE-200

Vulnerabilities

Filters