Opcfoundation Ua .Net Standard Stack vulnerabilities

9 vulnerabilities

Known vulnerabilities in Opcfoundation Ua .Net Standard Stack, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2021-27432opcfoundationua_.net_standard_stack+1
EPSS score
1.95%
OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.7.5CVE-2022-29866NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
1.68%
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption.7.5CVE-2022-29863NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
1.46%
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation.7.5CVE-2022-29862NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
1.68%
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message.7.5CVE-2022-29865NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
1.62%
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.7.5CVE-2022-29864NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
1.99%
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption.7.5CVE-2022-33916NuGetOPCFoundation.NetStandard.Opc.Ua.Server+1
EPSS score
1.39%
OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.5.3CVE-2024-42513NuGetOPCFoundation.NetStandard.Opc.Ua.Bindings.Https+1
EPSS score
0.58%
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.8.6CVE-2024-42512NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
0.60%
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.