CVE-2022-29864

mediumpriority · track · 31EPSS 0.020 · 81 %ileDEEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.99% (81st) EPSS
CVSS 5 · medium
Is it mine?
23 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · nvd · osv

EPSS · scored 2026-10-27

OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedtrumpf_psirt

    Use the updated versions of the TRUMPF OPC UA server that will be available via MyTRUMPF.

  • Fixedphoenix_contact_psirt

    Update to the latest LTS Firmware Release.Update to the latest LTS PLCnext Engineer Release.Please check Phoenix Contact PSIRT webpage for further Updates of this Advisory.

  • Mitigationphoenix_contact_psirt

    Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:Measures to protect network-capable devices with Ethernet connection

02

cvss

Technical severity, 0–10. One row per scoring source.

7.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · OSV
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Phoenix Contact PSIRT DE
v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · TRUMPF PSIRT
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USprimaryCWE-400USCWE-400USCWE-400US
04

affected products (23)

Products and version ranges known to be affected.

showing 20 of 23
05

advisories (3)

Vendor and ecosystem advisories describing this.

  • VDE-2022-034TRUMPF: Products prone to Unified Automation vulnerabilities2022-08-15csaf · trumpf_psirtDE

    A number of TRUMPF software tools use the OPC UA Server in C++ based OPC UA SDK by Unified Automation. The application contains several vulnerabilities, which enable an attacker to send malicious data to the application, resulting in a Denial-of-Service.

  • VDE-2022-046PHOENIX CONTACT: Multiple Linux component vulnerabilities in PLCnext Firmware2022-11-10csaf · phoenix_contact_psirtDE

    UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

  • GHSA-vhfw-v69p-crcwUncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core2022-06-17ghsa · osvUS

    A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception by sending a large number of message chunks.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdnvdosvphoenix_contact_psirttrumpf_psirtNVDCVE.orgMITRE
published 2022-06-16modified 2026-06-17
09

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan