Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-8867 · ADVISORY
• OPCFoundation/UA-.NETStandard release 1.4.359.31 · WEB
• opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-8867.pdf · WEB
• zerodayinitiative.com/advisories/ZDI-20-536 · WEB
• zerodayinitiative.com/advisories/ZDI-20-536 · Third Party Advisory

OPCFoundation.NetStandard.Opc.Ua のその他の脆弱性

• CVE-2024-45526中 5.3An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid…
• GHSA-qm9f-c3v9-wphv高 7.5Security Update for the OPC UA .NET Standard Stack
• CVE-2018-12087中 5.3Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over …
• CVE-2018-12086高 7.5Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
• CVE-2018-7559中 5.3An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Samp…