Skip to content
Noroxi

opcfoundation records

28 published records for vendor opcfoundation.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
64.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

28 records
  • CVE-2017-12070
    35Monitor

    Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.

    HighCVSS 8.8No exploitEPSS 1%

    opcfoundation · ua-.net-legacyJun 14, 2018

  • CVE-2018-12086
    34Monitor

    Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

    HighCVSS 7.5Proof of conceptEPSS 12%

    opcfoundation · unified architecture-.net-legacySep 14, 2018

  • CVE-2024-42512
    34Monitor

    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when

    HighCVSS 8.6No exploitEPSS 1%

    opcfoundation · ua .net standard stackFeb 10, 2025

  • CVE-2018-12585
    32Monitor

    An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.

    HighCVSS 8.2No exploitEPSS 2%

    opcfoundation · ua-.net-legacySep 14, 2018

  • CVE-2020-8867
    31Monitor

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Stand

    HighCVSS 7.5No exploitEPSS 3%

    opcfoundation · unified architecture .net-standardApr 22, 2020

  • CVE-2021-40142
    31Monitor

    In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefull

    HighCVSS 7.5No exploitEPSS 3%

    opcfoundation · local discover serverAug 27, 2021

  • CVE-2022-30551
    31Monitor

    OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua-javaMay 20, 2022

  • CVE-2022-29864
    31Monitor

    OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontro

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua .net standard stackJun 16, 2022

  • CVE-2021-27432
    31Monitor

    OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may a

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua-.net-legacyMay 20, 2021

  • CVE-2022-29866
    31Monitor

    OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua .net standard stackJun 16, 2022

  • CVE-2017-11672
    31Monitor

    The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the op

    HighCVSS 7.8No exploitEPSS 0%

    opcfoundation · local discovery serverJun 13, 2018

  • CVE-2022-44725
    31Monitor

    OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file.

    HighCVSS 7.8No exploitEPSS 0%

    opcfoundation · local discovery serverNov 17, 2022

  • CVE-2022-29862
    30Monitor

    An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message.

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua .net standard stackJun 16, 2022

  • CVE-2022-29865
    30Monitor

    OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

    HighCVSS 7.5No exploitEPSS 2%

    opcfoundation · ua .net standard stackJun 16, 2022

  • CVE-2022-29863
    30Monitor

    OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation.

    HighCVSS 7.5No exploitEPSS 1%

    opcfoundation · ua .net standard stackJun 16, 2022

  • CVE-2022-33916
    30Monitor

    OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.

    HighCVSS 7.5No exploitEPSS 1%

    opcfoundation · ua .net standard stackAug 22, 2022

  • CVE-2023-32787
    30Monitor

    The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so

    HighCVSS 7.5No exploitEPSS 1%

    opcfoundation · ua java legacyMay 15, 2023

  • CVE-2023-27321
    30Monitor

    OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    opcfoundation · ua-.netstandardMay 7, 2024

  • CVE-2024-33862
    30Monitor

    A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to

    HighCVSS 7.5No exploitEPSS 1%

    Jul 5, 2024

  • CVE-2019-19135
    29Monitor

    In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.O

    HighCVSS 7.4No exploitEPSS 1%

    opcfoundation · netstandard.opc.uaMar 16, 2020

  • CVE-2021-45117
    26Monitor

    The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases.

    MediumCVSS 6.5No exploitEPSS 1%

    opcfoundation · ua-nodesetMar 21, 2022

  • CVE-2017-17443
    26Monitor

    OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to

    MediumCVSS 6.5No exploitEPSS 1%

    opcfoundation · local discovery serverJun 13, 2018

  • CVE-2018-7559
    21Monitor

    An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Samp

    MediumCVSS 5.3No exploitEPSS 1%

    opcfoundation · ua-.net-legacyJun 13, 2018

  • CVE-2023-31048
    21Monitor

    The OPC UA .NET Standard Reference Server before 1.4.371.86.

    MediumCVSS 5.3No exploitEPSS 1%

    opcfoundation · ua-.netstandardDec 12, 2023

  • CVE-2024-42513
    21Monitor

    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when

    MediumCVSS 5.3No exploitEPSS 1%

    opcfoundation · ua .net standard stackFeb 10, 2025