CPE Details
OPC UA Stack Project OPC UA Stack 3.8.0
3.8.0
2022-08-25
12h14 +00:00
12h14 +00:00
2022-08-26
22h44 +00:00
22h44 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:opc_ua_stack_project:opc_ua_stack:3.8.0:*:*:*:*:*:*:*
Informations
Vendor
opc_ua_stack_projectProduct
opc_ua_stackVersion
3.8.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in OpcUaNodeIdBase.h. Exploiting this vulnerability is possible when sending a specifically crafted OPC UA message with a special encoded NodeId. | 7.5 |
High |
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.