Unified-Automation Uagateway vulnerabilities

CVE-2023-32174 [CRITICAL] CWE-416 CVE-2023-32174: Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. Th Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the product is in its default configuration. The specific fl

CVE-2023-41185 [HIGH] CWE-190 CVE-2023-41185: Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. T Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of

CVE-2023-32172 [MEDIUM] CWE-416 CVE-2023-32172: Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vuln Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the I

CVE-2023-32171 [MEDIUM] CWE-476 CVE-2023-32171: Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The specific flaw exists within the ImportCsv met

CVE-2023-32170 [MEDIUM] CWE-20 CVE-2023-32170: Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. User interaction is required to exploit this vulnerability in that the target must choose to accept a client

CVE-2023-32173 [MEDIUM] CWE-91 CVE-2023-32173: Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability. This vulnerabi Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the product is in its default configuration. The specific fla