OPC Foundation Update
1578Warning Date
Severity Level
Warning Number
Target Sector
17 May, 2021
● High
2021-2918
All
Description:
OPC Foundation has released a security update to address vulnerabilities in the following products:
- OPC UA .NET Standard: versions prior to 1.4.365.48
- OPC UA .NET Legacy
- Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only)
Threats:
Attacker could exploit this vulnerabilities by doing the following:
- Buffer overflow
- Sensitive information disclosure
Best practice and Recommendations:
The CERT team encourages users to review OPC Foundation security advisory and apply the necessary updates: