ZDI-23-780: Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability
Published May 31, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the product is in its default configuration.
Affected Software
1 affected component
Unified Automation UaGateway
Event History
May 31, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:06 AM
Frequently Asked Questions
1
What is the severity of ZDI-23-780?
The severity of ZDI-23-780 is critical due to its potential for remote code execution.
2
How do I fix ZDI-23-780?
To fix ZDI-23-780, upgrade your Unified Automation UaGateway software to the latest version.
3
What products are affected by ZDI-23-780?
ZDI-23-780 affects Unified Automation UaGateway installations.
4
Is authentication required to exploit ZDI-23-780?
Yes, authentication is required to exploit ZDI-23-780 when using the product in its default configuration.
5
What type of attack does ZDI-23-780 allow?
ZDI-23-780 allows remote attackers to execute arbitrary code on vulnerable installations.