CVE-2021-27434

HIGH

Unified-automation .net Based Opc UA Client/server SDK < 3.0.7 - Information Disclosure

Title source: rule
STIX 2.1

Description

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-21-133-04

Scores

CVSS v3 7.5
EPSS 0.0174
EPSS Percentile 74.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-674 CWE-200
Status published
Products (1)
unified-automation/.net_based_opc_ua_client\/server_sdk < 3.0.7
Published May 20, 2021
Tracked Since Feb 18, 2026