uagateway vulnerabilities and fixes

Recent CVEs affecting uagateway, with upgrade or downgrade steps. 6 tracked.

uagateway has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-05-03. Highest priority: CVE-2023-32174 (score 52/100).

• CVE-2023-41185 HIGH 7.5 UPGRADE Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability
• CVE-2023-32174 CRITICAL 9.1 UPGRADE Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability
• CVE-2023-32173 MEDIUM 5.8 UPGRADE Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability
• CVE-2023-32172 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability
• CVE-2023-32171 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
• CVE-2023-32170 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability

FAQ

How do I fix uagateway vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is uagateway being exploited right now?

None of the tracked uagateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which uagateway CVE should I patch first?

CVE-2023-32174 currently ranks highest (52/100): Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.

RSS feed for uagateway · ← Back to latest CVEs