What is CVE-2021-27434?

CVE-2021-27434 is a vulnerability in the Unified Automation .NET based OPC UA Client/Server SDK Bundle with versions up to 3.0.7, which allows an attacker to trigger a stack overflow.

What is the severity of CVE-2021-27434?

CVE-2021-27434 has a severity rating of 7.5 (high).

How can an attacker exploit CVE-2021-27434?

An attacker can exploit CVE-2021-27434 by triggering an uncontrolled recursion, leading to a stack overflow.

Is Microsoft .NET Framework vulnerable to CVE-2021-27434?

Microsoft .NET Framework versions 3.5, 4.0, and 4.5 are not vulnerable to CVE-2021-27434.

Vulnerability/
CVE-2021-27434

high

7.5

CWE

674 200

20/5/2021

15/10/2023

CVE-2021-27434: Infoleak

Q: Which software versions are affected by CVE-2021-27434?

Versions 3.0.7 and prior of the Unified Automation .NET based OPC UA Client/Server SDK Bundle (for .NET Framework 4.5, 4.0, and 3.5) are affected.

First published: Thu May 20 2021(Updated: )

Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
Unified-automation .net Based Opc Ua Client\/server Sdk	<=3.0.7
Microsoft .NET Framework	=3.5
Microsoft .NET Framework	=4.0
Microsoft .NET Framework	=4.5

Never miss a vulnerability like this again

Reference Links

https://us-cert.cisa.gov/ics/advisories/icsa-21-133-04

Frequently Asked Questions

What is CVE-2021-27434?
CVE-2021-27434 is a vulnerability in the Unified Automation .NET based OPC UA Client/Server SDK Bundle with versions up to 3.0.7, which allows an attacker to trigger a stack overflow.
What is the severity of CVE-2021-27434?
CVE-2021-27434 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2021-27434?
Versions 3.0.7 and prior of the Unified Automation .NET based OPC UA Client/Server SDK Bundle (for .NET Framework 4.5, 4.0, and 3.5) are affected.
How can an attacker exploit CVE-2021-27434?
An attacker can exploit CVE-2021-27434 by triggering an uncontrolled recursion, leading to a stack overflow.
Is Microsoft .NET Framework vulnerable to CVE-2021-27434?
Microsoft .NET Framework versions 3.5, 4.0, and 4.5 are not vulnerable to CVE-2021-27434.

collector/nvd-api
collector/nvd-index
agent/severity
agent/references
agent/weakness
agent/author
agent/type
agent/tags
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
vendor/unified-automation
canonical/unified-automation .net based opc ua client\/server sdk
version/unified-automation .net based opc ua client\/server sdk/3.0.7
vendor/microsoft
canonical/microsoft .net framework
version/microsoft .net framework/3.5
version/microsoft .net framework/4.0
version/microsoft .net framework/4.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.