Threat Intelligence Database

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component

A buffer overflow vulnerability exists in open62541 version 1.5.5 that allows a remote attacker to cause a denial of service. The issue arises from improper validation of input arguments in the Service_Call function against runtime-resolved InputArguments metadata.

A buffer overflow vulnerability exists in open62541 version 1.5.5. This flaw occurs in the Service_Call function, which validates input arguments against runtime-resolved InputArguments metadata. An unauthenticated remote attacker can exploit this vulnerability to cause a denial of service (DoS) condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently available.

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local MonitoredItem. This allows a remote attacker to cause a denial of service.

A denial of service vulnerability exists in open62541 versions 1.5.5 and earlier. The issue arises from the NodeManagement type-instantiation logic, allowing a remote attacker to cause service disruption without requiring authentication. The vulnerability has a high severity rating with a CVSS score of 7.5.

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

open62541 version 1.5.5 contains a heap-based buffer overflow vulnerability in the default HistoryRead path when using the default history database with the memory backend. This vulnerability can lead to a denial of service due to application crash. The issue is identified as CWE-122 and has a CVSS 3.1 base score of 7.5, indicating high severity. There is no vendor advisory or patch information currently available.

A buffer overflow vulnerability exists in open62541 version 1.5.5 that allows a remote attacker to cause a denial of service via the Discovery/LDS handling functionality. This vulnerability has a high severity with a CVSS score of 7.5. No official patch or remediation has been confirmed at this time.

A denial of service vulnerability exists in open62541 version 1.5.5 and earlier. The flaw is triggered via the UA_Client_getRemoteDataTypes component, allowing a remote attacker to cause a denial of service without requiring user interaction or privileges.

An out-of-bounds read vulnerability exists in open62541 version 1.5.5 within the client-side function responseReadNamespacesArray() located in src/client/ua_client_connect.c. This flaw can lead to unauthorized memory access when processing namespace array responses.