Description
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).
Advisories 4
- ICSA-24-102-08 Siemens OPC Foundation Local Discovery Server Affecting Siemens Products CISA ICS & IT advisories · Sep 9, 2025
- SSA-691715 SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products Siemens ProductCERT · Sep 9, 2025
- ICSA-23-103-03 Siemens in OPC Foundation Local Discovery Server CISA ICS & IT advisories · May 6, 2025
- SSA-556635 SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0 Siemens ProductCERT · Apr 9, 2024