| 0 |
|
| 1 |
| url |
VCID-6esm-z7xc-e3bw |
| vulnerability_id |
VCID-6esm-z7xc-e3bw |
| summary |
An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-45526, GHSA-7vfh-cqpc-4267
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6esm-z7xc-e3bw |
|
| 2 |
| url |
VCID-abtv-hh67-d3e1 |
| vulnerability_id |
VCID-abtv-hh67-d3e1 |
| summary |
Security Update for the OPC UA .NET Standard Stack
This security update resolves a vulnerability in the OPC UA .NET Standard Stack that enables an unauthorized attacker to trigger a rapid increase in memory consumption. |
| references |
|
| fixed_packages |
|
| aliases |
GHSA-qm9f-c3v9-wphv
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-abtv-hh67-d3e1 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| url |
VCID-u8w8-5s2v-1ycq |
| vulnerability_id |
VCID-u8w8-5s2v-1ycq |
| summary |
A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-33862, GHSA-4q2p-hwmr-qcxc
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u8w8-5s2v-1ycq |
|
| 7 |
|
| 8 |
|
| 9 |
| url |
VCID-vwhg-us5p-63ey |
| vulnerability_id |
VCID-vwhg-us5p-63ey |
| summary |
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-42512, GHSA-h958-fxgg-g7w3
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vwhg-us5p-63ey |
|
| 10 |
|