CyberSecBulletin

Unified Automation vulnerabilities

We track 4 vulnerabilities in Unified Automation products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 3, 2024.

4vulnerabilities
1critical
3high
0exploited
7.9average CVSS score

Latest Unified Automation vulnerabilities

  • 7.5 High severity

    UaGateway: Integer Overflow or Wraparound

    CVE-2023-41185Unified Automation

    Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is n

  • 9.1 Critical severity

    UaGateway: Use After Free

    CVE-2023-32174Unified AutomationEPSS 1.85%

    Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to expl

  • 7.5 High severity

    OPC UA C++ Demo Server: Loop with Unreachable Exit Condition

    CVE-2022-37013Unified AutomationEPSS 1.15%

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 [with vendor rollup]. Authentication is not required to exploit this vulnerability. The specific

  • 7.5 High severity

    OPC UA C++ Demo Server: Improper Update of Reference Count

    CVE-2022-37012Unified AutomationEPSS 1.78%

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within t