ZDI-CAN-20577: ZDI-23-780: Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability
Published May 31, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the product is in its default configuration.
Affected Software
1 affected component
Unified Automation UaGateway
Event History
May 31, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:06 AM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20577?
The severity of ZDI-CAN-20577 is high due to its potential for remote code execution.
2
How do I fix ZDI-CAN-20577?
To fix ZDI-CAN-20577, update Unified Automation UaGateway to the latest version that addresses this vulnerability.
3
Who can exploit ZDI-CAN-20577?
ZDI-CAN-20577 can be exploited by authenticated remote attackers when the product is in its default configuration.
4
What types of attacks are possible with ZDI-CAN-20577?
ZDI-CAN-20577 allows remote attackers to execute arbitrary code on affected installations of UaGateway.
5
Is there a patch available for ZDI-CAN-20577?
Yes, a patch is available in the latest updates of Unified Automation UaGateway.