Opcfoundation Local Discovery Server vulnerabilities

3 vulnerabilities

Known vulnerabilities in Opcfoundation Local Discovery Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2022-44725opcfoundationlocal_discovery_server
EPSS score
0.18%
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).7.8CVE-2017-11672opcfoundationlocal_discovery_server
EPSS score
0.32%
The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges.6.5CVE-2017-17443opcfoundationlocal_discovery_server
EPSS score
0.90%
OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the configuration file is stored; however, if the configuration file is altered the LDS will be unavailable until it is repaired.