OP
Vendor
Opcfoundation
34
CVEs
0
On KEV
0
New 30D
Products
UN8.6
UA .net Standard Stack
Opcfoundation
9 CVEs0 on KEV0 new
UA7.5
Ua-.netstandard
Opcfoundation
6 CVEs0 on KEV0 new
UA8.8
Ua-.net-legacy
Opcfoundation
5 CVEs0 on KEV0 new
LD7.8
Local Discovery Server
Opcfoundation
3 CVEs0 on KEV0 new
UA8.2
Ua-java
Opcfoundation
2 CVEs0 on KEV0 new
UA7.5
Unified Architecture .net-standard
Opcfoundation
2 CVEs0 on KEV0 new
LD7.5
Local Discover Server
Opcfoundation
1 CVEs0 on KEV0 new
NE7.4
Netstandard.opc.ua
Opcfoundation
1 CVEs0 on KEV0 new
UJ7.5
UA Java Legacy
Opcfoundation
1 CVEs0 on KEV0 new
UA6.5
Ua-nodeset
Opcfoundation
1 CVEs0 on KEV0 new
UA7.5
Unified Architecture Ansic
Opcfoundation
1 CVEs0 on KEV0 new
UA7.5
Unified Architecture-java
Opcfoundation
1 CVEs0 on KEV0 new
UA7.5
Unified Architecture-.net-legacy
Opcfoundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-42513 | UN UA .net Standard Stack Opcfoundation | 5.3 | Feb 10 | Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints |
| CVE-2024-42512 | UN UA .net Standard Stack Opcfoundation | 8.6 | Feb 10 | Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security… |
| CVE-2023-27321 | UA Ua-.netstandard Opcfoundation | 7.5 | May 7 | OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability |
| CVE-2023-31048 | UA Ua-.netstandard Opcfoundation | 5.3 | Dec 12 | The OPC UA .NET Standard Reference Server before 1.4.371.86 |
| CVE-2023-32787 | UJ UA Java Legacy Opcfoundation | 7.5 | May 15 | The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client… |
| CVE-2022-44725 | LD Local Discovery Server Opcfoundation | 7.8 | Nov 17 | OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file |
| CVE-2022-33916 | UN UA .net Standard Stack Opcfoundation | 7.5 | Aug 23 | OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information |
| CVE-2022-29866 | UN UA .net Standard Stack Opcfoundation | 7.5 | Jun 16 | OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption |
| CVE-2022-29864 | UN UA .net Standard Stack Opcfoundation | 7.5 | Jun 16 | OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption |
| CVE-2022-29863 | UN UA .net Standard Stack Opcfoundation | 7.5 | Jun 16 | OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation |
| CVE-2022-29865 | UN UA .net Standard Stack Opcfoundation | 7.5 | Jun 16 | OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials |
| CVE-2022-29862 | UN UA .net Standard Stack Opcfoundation | 7.5 | Jun 16 | An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message |
| CVE-2022-30551 | UA Ua-java Opcfoundation | 7.5 | May 20 | OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources |
| CVE-2021-45117 | UA Ua-nodeset Opcfoundation | 6.5 | Mar 21 | The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases |
| CVE-2021-40142 | LD Local Discover Server Opcfoundation | 7.5 | Aug 27 | In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access… |
| CVE-2021-27432 | UA Ua-.net-legacy Opcfoundation | 7.5 | May 20 | OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack… |
| CVE-2020-29457 | UA Ua-.netstandard Opcfoundation | 4.4 | Feb 16 | A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection |
| CVE-2020-8867 | UA Unified Architecture .net-standard Opcfoundation | 7.5 | Apr 22 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30 |
| CVE-2019-19135 | UA Ua-.netstandard Opcfoundation | 7.4 | Mar 16 | In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows… |
| CVE-2018-12087 | UA Ua-.net-legacy Opcfoundation | 5.3 | Oct 3 | Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to… |
| CVE-2018-12585 | UA Ua-.net-legacy Opcfoundation | 8.2 | Sep 14 | An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service |
| CVE-2018-12086 | UA Unified Architecture .net-standard Opcfoundation | 7.5 | Sep 14 | Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests |
| CVE-2017-12070 | UA Ua-.net-legacy Opcfoundation | 8.8 | Jun 14 | Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code |
| CVE-2018-7559 | UA Ua-.net-legacy Opcfoundation | 5.3 | Jun 13 | An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13 |
| CVE-2017-17443 | LD Local Discovery Server Opcfoundation | 6.5 | Jun 13 | OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data… |
| CVE-2017-11672 | LD Local Discovery Server Opcfoundation | 7.8 | Jun 13 | The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might… |