Freeopcua vulnerabilities
We track 3 vulnerabilities in Freeopcua products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2023.
Latest Freeopcua vulnerabilities
- 7.5 High severity
asyncua: Loop with Unreachable Exit Condition
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.
- 7.5 High severity
asyncua: Improper Authentication
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an acti
- 7.5 High severity
FreeOpcUa/freeopcua: Allocation of Resources Without Limits or Throttling
All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.