CVE Feed

    Dashboard / CVE / CVE-2022-29866

    CVE-2022-29866

    OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption.

    Published:Jun 16, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 16, 2022
    EPSS Score:0.00797
    CVSS Score:7.5

    Affected Products

    Vendor
    Opcfoundation
    Product
    Ua .net Standard Stack

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-42513 (CVSS 5.3) — Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass a…
    CVE-2024-42512 (CVSS 8.6) — Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass a…
    CVE-2022-33916 (CVSS 7.5) — OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sen…
    CVE-2022-29863 (CVSS 7.5) — OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that trigger…
    CVE-2022-29864 (CVSS 7.5) — OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of …
    CVE-2022-29862 (CVSS 7.5) — An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to …
    CVE-2022-29865 (CVSS 7.5) — OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted…
    CVE-2021-27432 (CVSS 7.5) — OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncon…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High