PT-2018-11271 · Opc Foundation · Opc Ua Java+1

Publicado 2018-09-14 · Atualizado 2018-11-27 · CVE-2018-12585

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions OPC UA Java and .NET Legacy Stack (affected versions not specified)

Description The issue is related to an XXE vulnerability that can be exploited by remote attackers to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-12585

Produtos afetados

Opc Ua .Net Legacy Stack

Opc Ua Java

Referências · 4

• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12585.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12585 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12585 · Nota de Segurança
• http://securityfocus.com/bid/105538 · Nota