CVE-2023-7234
Assigner: icscert
Published: 2024-01-16T18:11:50.146Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: OPC UA Server Toolkit
vendor: Integration Objects
versions: status: affected
version: all versions
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Sam Hanson of Dragos reported this vulnerability to CISA.
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.</span>


value: 
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-117
description: CWE-117 
type: CWE
source: discovery: EXTERNAL
title: Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs
workarounds: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Integration Objects has not responded to requests to work with CISA to mitigate these vulnerabilities. Developers using affected versions of OPC UA Server Toolkit are invited to contact </span><a target="_blank" rel="nofollow" href="https://integrationobjects.com//ask-a-question/">Integration Objects for additional information.</a>

<br>
value: 
Integration Objects has not responded to requests to work with CISA to mitigate these vulnerabilities. Developers using affected versions of OPC UA Server Toolkit are invited to contact  Integration Objects for additional information. https://integrationobjects.com//ask-a-question/ 



x_generator: engine: Vulnogram 0.1.0-dev