OPC UA applications can allow a remote attacker to determine a Server's private key

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-7559 · ADVISORY
• OPCFoundation/UA-.NET-Legacy commit e2a781b · WEB
• OPCFoundation/UA-.NETStandard commit ebcf026 · WEB
• OPCFoundation/UA-.NETStandard · PACKAGE
• GitHub Advisory GHSA-gr4c-5rq6-cgh3 · ADVISORY
• opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf · WEB
• securityfocus.com/bid/108688 · WEB

OPCFoundation.NetStandard.Opc.Ua のその他の脆弱性

• CVE-2024-45526中 5.3An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid…
• GHSA-qm9f-c3v9-wphv高 7.5Security Update for the OPC UA .NET Standard Stack
• CVE-2020-8867高 7.5This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Stand…
• CVE-2018-12087中 5.3Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over …
• CVE-2018-12086高 7.5Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.