Description

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.

Remediation

References

http://www.securityfocus.com/bid/105538

https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12585.pdf

Related Vulnerabilities

CVE-2014-3623 Vulnerability in maven package org.apache.ws.security:wss4j

CVE-2022-24913 Vulnerability in maven package com.fasterxml.util:java-merge-sort

CVE-2016-1182 Vulnerability in maven package struts:struts

CVE-2021-23363 Vulnerability in npm package kill-by-port

CVE-2021-4299 Vulnerability in npm package string-kit

Severity

Critical

Classification

CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Tags

Third Party Advisory VDB Entry Vendor Advisory