Description
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
Advisories 6
- VDE-2022-003 BECKHOFF: Null Pointer Dereference vulnerability in products with OPC UA technology CERT@VDE · Jun 5, 2025
- VDE-2022-010 PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release CERT@VDE · May 22, 2025
- VDE-2022-046 PHOENIX CONTACT: Multiple Linux component vulnerabilities in PLCnext Firmware CERT@VDE · May 22, 2025
- ICSA-22-132-08 Siemens Industrial Products with OPC UA CISA ICS & IT advisories · Oct 10, 2023
- SSA-285795 SSA-285795: Denial of Service in OPC-UA in Industrial Products Siemens ProductCERT · Oct 10, 2023
- WID-SEC-2023-2603 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 9, 2023