Asyncua vulnerabilities
We track 3 vulnerabilities in Asyncua products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2023.
Latest Asyncua vulnerabilities
- 7.5 High severity
asyncua: Loop with Unreachable Exit Condition
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.
- 7.5 High severity
asyncua: Improper Authentication
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an acti
- 7.5 High severity
opcua: Allocation of Resources Without Limits or Throttling
All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vul