OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability

高 7.5CVE-2024-33862 · GHSA-4q2p-hwmr-qcxc · 05/07/2024 公開 · 17/06/2026 更新

要点

CVE-2024-33862 は OPCFoundation.NetStandard.Opc.Ua.Core に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.56%（全脆弱性の 46.5% より高い）。
対処：1.5.374.54 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.5.374.54`	`1.5.374.54`

概要

A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.5.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.

NVD の説明

A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.