CVE-2021-27432
High
Description
OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
SeverityHigh
CVSS7.5
Exploit probability—
ProductOpcfoundation Ua-.net-legacy
PublishedMay 20, 2021
First seenMay 20, 2021
Weakness typeCWE-674CWE-674
How to fix
Update
- opcfoundation ua_.net_standard_stack1.4.365.48 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opcfoundation ua-.net-legacy | No range specified | — |
| opcfoundation ua_.net_standard_stack | v < 1.4.365.48 | 1.4.365.48 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.