PT-2018-11271 · Opc Foundation · Opc Ua Java+1

Published 2018-09-14 · Updated 2018-11-27 · CVE-2018-12585

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions OPC UA Java and .NET Legacy Stack (affected versions not specified)

Description The issue is related to an XXE vulnerability that can be exploited by remote attackers to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2018-12585

Affected Products

Opc Ua .Net Legacy Stack

Opc Ua Java

References · 4

• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12585.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12585 · Security Note
• http://securityfocus.com/bid/105538 · Note