CVE-2024-33862
High
Description
A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.
SeverityHigh
CVSS7.5
Exploit probability—
ProductOpcfoundation.netstandard.opc.ua.core
PublishedJul 5, 2024
First seenJul 5, 2024
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- OPCFoundation.NetStandard.Opc.Ua.Core1.5.374.54 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OPCFoundation.NetStandard.Opc.Ua.CoreNuGet | v < 1.5.374.54 | 1.5.374.54 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.