CVE-2022-44725
High
Description
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).
SeverityHigh
CVSS7.8
Exploit probability—
ProductOpcfoundation Local Discovery Server
PublishedNov 17, 2022
First seenNov 17, 2022
Weakness typeCWE-732CWE-732
How to fix
Update
- opcfoundation local_discovery_server1.04.405.479 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opcfoundation local_discovery_server | v < 1.04.405.479 | 1.04.405.479 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.