CVE-2017-17443: OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabil

Routine

MEDIUM 6.5DOWNGRADE

CVE-2017-17443 is a medium-severity flaw (CVSS 6.5) affecting local discovery server. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the configuration file is stored; however, if the configuration file is altered the LDS will be unavailable until it is repaired.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.5 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.9% (top 40%)
CISA exploited list	No
Weakness	CWE-20
Published	2018-06-13
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: opcfoundation

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2018-06-13 18:29 UTCPublished CVE record published
2026-06-17 01:10 UTCUpdated Record last modified

opcfoundation local discovery server DOWNGRADE

Affected: 1.03.370

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.03.370

1. Check installed version

apt-cache policy local-discovery-server || rpm -q local-discovery-server || local-discovery-server --version

2. No fixed release: DOWNGRADE to a release before 1.03.370 (Debian / Ubuntu)

apt-cache madison local-discovery-server sudo apt install local-discovery-server=<VERSION_BEFORE_1.03.370> sudo apt-mark hold local-discovery-server

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list local-discovery-server sudo dnf downgrade local-discovery-server-<VERSION_BEFORE_1.03.370> sudo dnf versionlock add local-discovery-server

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2017-17443?

local discovery server: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2017-17443 being exploited?

CVE-2017-17443 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2017-17443 affect?

CVE-2017-17443 affects local discovery server. Severity is medium (CVSS 6.5). OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an

How urgent is CVE-2017-17443?

Priority 38/100. No elevated risk signals yet.

Related CVEs

CVE-2022-44725 HIGH 7.8 UPGRADE OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuratio
CVE-2017-12069 HIGH 8.2 UPGRADE UPGRADE An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Dis
CVE-2017-11672 HIGH 7.8 UPGRADE The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without addi

References

← Back to latest CVEs