Description
OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OPC Foundation OPC UA .NET Standard and OPC UA .NET Legacy | OPC UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy | — |
Advisories 3
- VDE-2021-008 Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products CERT@VDE · May 22, 2025
- ICSA-21-294-03 ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA CISA ICS & IT advisories · Oct 21, 2021
- ICSA-21-133-03 OPC Foundation UA Products Built with .NET Framework CISA ICS & IT advisories · May 13, 2021