Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7vc-4gr6-g2px

Опубликовано: 20 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

EPSS

Процентиль: 62%
0.00428
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость реализации стандарта промышленной связи OPC UA на языке программирования ANSI C программного обеспечения продуктов Siemens, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 62%
0.00428
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-190