Description
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ OPC UA Server Expert | Versions prior to SV2.01 SP3 | — |
| Schneider Electric | EcoStruxure™ Modicon Communication Server | All versions | — |
Advisories 2
- ICSA-25-301-01 Schneider Electric EcoStruxure CISA ICS & IT advisories · Oct 14, 2025
- SEVD-2025-287-01 EcoStruxure™ OPC UA Server Expert and EcoStruxure™ Modicon Communication Server Schneider Electric CPCERT · Oct 14, 2025