Description
open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to cause a denial of service.
Published: 2026-08-04
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a buffer-overflow in the high-level attribute reading logic of open62541 1.5.5, allowing a remote attacker to cause a denial of service. This aligns with a classic stack-based buffer overflow (CWE–121).

Affected Systems

The affected system is the open62541 OPC UA client library version 1.5.5. No other vendor or product versions are listed.

Risk and Exploitability

An unauthenticated remote attacker can trigger the flaw by sending a crafted request, which may crash the application and disrupt service. The EPSS score is unavailable and the issue is not listed in the CISA KEV catalog, but the lack of authentication requirements and the severity of a DoS suggest a moderate to high risk until a patch is applied.

Generated by OpenCVE AI on August 4, 2026 at 23:39 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade open62541 to version 1.5.6 or later when the fix is released.
  • If patching is delayed, restrict network access to the OPC UA server exposing open62541 to trusted hosts only.
  • Monitor logs for repeated failures or abnormal memory usage that might indicate exploitation attempts.

Generated by OpenCVE AI on August 4, 2026 at 23:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 00:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in Open62541 High-Level Attribute Reading Causing DoS
Weaknesses CWE-121

Tue, 04 Aug 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Open62541
Open62541 open62541
Vendors & Products Open62541
Open62541 open62541

Tue, 04 Aug 2026 22:15:00 +0000

Type Values Removed Values Added
Description open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to cause a denial of service.
References

Subscriptions

Open62541 Open62541
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-04T21:37:43.870Z

Reserved: 2026-07-30T00:00:00.000Z

Link: CVE-2026-67862

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T23:45:02Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow