CVE-2021-27434CWE-200

CVE-2021-27434: vulnerability in OPC UA Products Built with the .NET Framework 4.

Published · Updated

Follow this CVE+ Monitor OPC UA Products Built with the .NET Framework 4.5, 4.0, and

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
Affected products
n/a · OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5