open62541 project / o6 Automation vulnerabilities
We track 2 vulnerabilities in open62541 project / o6 Automation products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 2, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest open62541 project / o6 Automation vulnerabilities
- 7.5 High severity
open62541: Allocation of Resources Without Limits or Throttling
An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service in open62541. The endpointUrl field of GetEndpointsRequest is not validated for length. An attacker can declare an arbitrarily large string (up to ~4.09 GB via
- 7.5 High severity
open62541: Allocation of Resources Without Limits or Throttling
An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field of FindServersRequest is not validated for length or array size. An attacker can declare an arbitrarily large string (up to ~3