CVE-2023-28831CWE-190

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an…

High · published September 12, 2023

CVSS v4.0
8.7
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01129 · 66.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-09-12T09:32Z
EPSS history
Timeline
  • 12 SEP 09:32Z
    The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an…
    cvelistv5