Threat Intelligence Database

A buffer overflow vulnerability exists in open62541 version 1.5.5 that allows a remote attacker to cause a denial of service. The issue arises from improper validation of input arguments in the Service_Call function against runtime-resolved InputArguments metadata.

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component

A buffer overflow vulnerability exists in open62541 version 1.5.5. This flaw occurs in the Service_Call function, which validates input arguments against runtime-resolved InputArguments metadata. An unauthenticated remote attacker can exploit this vulnerability to cause a denial of service (DoS) condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently available.

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local MonitoredItem. This allows a remote attacker to cause a denial of service.

A denial of service vulnerability exists in open62541 versions 1.5.5 and earlier. The issue arises from the NodeManagement type-instantiation logic, allowing a remote attacker to cause service disruption without requiring authentication. The vulnerability has a high severity rating with a CVSS score of 7.5.

open62541 version 1.5.5 contains a heap-based buffer overflow vulnerability in the default HistoryRead path when using the default history database with the memory backend. This vulnerability can lead to a denial of service due to application crash. The issue is identified as CWE-122 and has a CVSS 3.1 base score of 7.5, indicating high severity. There is no vendor advisory or patch information currently available.

A buffer overflow vulnerability exists in open62541 version 1.5.5 that allows a remote attacker to cause a denial of service via the Discovery/LDS handling functionality. This vulnerability has a high severity with a CVSS score of 7.5. No official patch or remediation has been confirmed at this time.

A denial of service vulnerability exists in open62541 version 1.5.5 and earlier. The flaw is triggered via the UA_Client_getRemoteDataTypes component, allowing a remote attacker to cause a denial of service without requiring user interaction or privileges.

An out-of-bounds read vulnerability exists in open62541 version 1.5.5 within the client-side function responseReadNamespacesArray() located in src/client/ua_client_connect.c. This flaw can lead to unauthorized memory access when processing namespace array responses.

A denial of service vulnerability exists in open62541 version 1.5.5 and earlier. Remote attackers can exploit this issue by sending specially crafted OPC UA service requests such as CreateSubscription, CreateMonitoredItems (Sampling), Publish, TransferSubscriptions, and DeleteSubscriptions. This leads to resource exhaustion or application disruption without requiring authentication.