PatchTheCVEunified-automation vulnerabilities
Recent CVEs affecting unified-automation products. 6 tracked.
unified-automation has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-05-03. Highest priority: CVE-2023-32174 (score 52/100).
- CVE-2023-41185 HIGH 7.5 UPGRADE Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability
- CVE-2023-32174 CRITICAL 9.1 UPGRADE Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-32173 MEDIUM 5.8 UPGRADE Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability
- CVE-2023-32172 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability
- CVE-2023-32171 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-32170 MEDIUM 6.5 UPGRADE Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability
FAQ
How do I fix unified-automation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unified-automation being exploited right now?
None of the tracked unified-automation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unified-automation CVE should I patch first?
CVE-2023-32174 currently ranks highest (52/100): Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability.