OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read any file on the file system.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27434US | high7.5 | — | ||
Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontr… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- MitigationUnified Automation .NET based OPC UA Client/Server SDK Bundle
Unified Automation has released software (login required) to address the .NET Framework vulnerabilities. OPC Foundation recommends users deploying OPC UA .NET products built against the .NET 4.5, 4.0, and 3.5 Frameworks should contact the product supplier to determine if an update is needed. Users should also consider upgrading to a version of the product using .NET 4.5.2 Framework or later. It is recommended users avoid using the end-of-life version of the .NET Framework due to the risk of unpatched vulnerabilities.
https://www.unified-automation.com/downloads/opc-ua-development.html
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan