Most recent entries from all

bdu:2022-02135

cnvd-2021-39138

EUVD-2026-25540

fkie_cve-2021-27432

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

GHSA-5rm8-9376-7gg5

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

gsd-2021-27432

ICSA-21-133-03 — OPC Foundation UA Products Built with .NET Framework

The affected products are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.CVE-2021-27432 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

VDE-2021-008 — Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products

The affected products can act as OPC UA client or server and are vulnerable to two different kind of attacks via the OPC UA protocol. For both cases the attacker can send packets via the OPC UA protocol without the need to authenticate and

1. provoke a stack overflow resulting in denial of service of the product or 2. make the product disclose information to the attacker without authorization.