Description
Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Prosys OPC | UA Simulation Server | < 5.3.0-64 | 5.3.0-64 |
| Prosys OPC | UA Modbus Server | ≤ 1.4.18-5 | — |
Advisories 1
- ICSA-22-349-01 Prosys OPC UA Simulation Server (Update A) CISA ICS & IT advisories · Jan 3, 2023