Opcfoundation vulnerabilities
We track 8 vulnerabilities in Opcfoundation products across 6 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on February 10, 2025.
Latest Opcfoundation vulnerabilities
- 8.6 High severity
SIMATIC Energy Manager PRO V7.2: Observable Timing Discrepancy
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
- 7.5 High severity
ua-.netstandard: Allocation of Resources Without Limits or Throttling
A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source
- 7.5 High severity
UA .NET Standard: Uncontrolled Resource Consumption
OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authenticatio
- 7.5 High severity
Ua Java Legacy: Uncontrolled Resource Consumption
The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications.
- 7.8 High severity
Local Discovery Server: Incorrect Permission Assignment for Critical Resource
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).
- 7.5 High severity
Ua .net Standard Stack: Uncontrolled Resource Consumption
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption.
- 7.5 High severity
Ua .net Standard Stack: Uncontrolled Resource Consumption
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption.
- 7.5 High severity
Ua-java: Uncontrolled Resource Consumption
OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources.