Skip to content
OpenAdvisories
Critical ICSA-24-226-02 2 CVEs

Rockwell Automation AADvance Standalone OPC-DA Server

Published Aug 13, 2024 · Updated Aug 13, 2024

Vendor: Rockwell Automation Product: AADvance Standalone OPC-DA Server

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code in the affected product.

Vulnerabilities 2

  • Critical 9.8
    CVE-2018-1285 Public exploit EPSS 18%

    XML External Entity attack in log4net

    Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

    log4net log4net log4net Debian Ubuntu NuGet
  • Medium —
    CVE-2006-0743

    Apache log4net format string vulnerability causes DoS

    Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

    log4net NuGet

Revision history

  1. #1

    Initial Publication

References