Summary
Successful exploitation of this vulnerability could allow an unauthenticated attacker to read any file on the file system.
Vulnerabilities 1
-
Unscored —
Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, …
Revision history
-
#1
ICSA-21-133-04 OPC UA Products Built with .NET Frameworks 4.5, 4.0, and 3.5
References
-
ICS Advisory ICSA-21-133-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-133-04
-
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B