Tran Van Arthur

**Name of the Vulnerable Software and Affected Versions** asyncua versions prior to 0.9.96 **Description** The issue is related to Improper Authentication, allowing access to Address Space without encryption and authentication. This is due to missing checks for services that require an active session. **Recommendations** For versions prior to 0.9.96, update to version 0.9.96 or later to resolve the issue. As a temporary workaround, consider implementing additional authentication checks for services that require an active session to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** asyncua versions prior to 0.9.96 **Description** The issue allows an attacker to send a malformed packet, causing the server to enter an infinite loop and consume excessive memory, resulting in a Denial of Service (DoS). **Recommendations** For versions prior to 0.9.96, update to version 0.9.96 or later to resolve the issue. As a temporary workaround, consider implementing packet validation to prevent malformed packets from being processed by the server. Restrict access to the server to minimize the risk of exploitation until the update is applied.