Filtered by vendor Unified-automation Subscriptions
Filtered by product Opc Ua C\+\+ Demo Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-37013 1 Unified-automation 1 Opc Ua C\+\+ Demo Server 2024-08-03 7.5 High
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537 [with vendor rollup]. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certificates. A crafted certificate can force the server into an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-17203.
CVE-2022-37012 1 Unified-automation 1 Opc Ua C\+\+ Demo Server 2024-08-03 7.5 High
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6-537. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpcUa_SecureListener_ProcessSessionCallRequest method. A crafted OPC UA message can force the server to incorrectly update a reference count. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-16927.