ZeroHour

CVE-2021-27434

CVSS 3.1
7.5 high
EPSS
2%p76
Published
()
Modified
Description

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

Vendors
unified-automation
Products
.net based opc ua client\/server sdk
Weakness
CWE-200, CWE-674
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.