opcfoundation

Top products

The 13 most recently published vulnerabilities affecting opcfoundation.

• CVE-2021-45117The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.6.5Mar 21, 2022
• CVE-2021-40142In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Locati...7.5Aug 27, 2021
• CVE-2021-27432OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.7.5May 20, 2021
• CVE-2020-29457A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection.4.4Feb 16, 2021
• CVE-2020-8867This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploi...7.5Apr 22, 2020
• CVE-2019-19135In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle a...7.4Mar 16, 2020
• CVE-2018-12087Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.5.3Oct 3, 2018
• CVE-2018-12086Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.7.5Sep 14, 2018
• CVE-2018-12585An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.8.2Sep 14, 2018
• CVE-2017-12070Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.8.8Jun 14, 2018
• CVE-2018-7559An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability ...5.3Jun 13, 2018
• CVE-2017-17443OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configur...6.5Jun 13, 2018
• CVE-2017-11672The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users...7.8Jun 13, 2018