In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| opcfoundation | local_discover_server | 1.04.402.463 | - |
| siemens | simatic_process_historian_opc_ua_server_firmware | 2022 | - |
| siemens | simatic_process_historian_opc_ua_server_firmware |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
11
Affected Products
6
References
opcfoundation / local_discover_server
| - |
| - |
| siemens | simatic_net_pc | - | - |
| siemens | simatic_net_pc | - | - |
| siemens | simatic_net_pc | - | - |
| siemens | simatic_net_pc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc_runtime | - | - |
| siemens | simatic_wincc_unified_scada_runtime | - | - |
| siemens | telecontrol_server_basic | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability
Impact