What’s Vulnerable › Vulnerabilities

CVE-2023-7234: Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-16 · updated 2026-06-17
• Weakness: CWE-117

Description

OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.

Affected products

• Integration Objects OPC UA Server Toolkit: all versions

References

• https://integrationobjects.com//ask-a-question/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-016-02
• https://integrationobjects.com//ask-a-question/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-016-02

Get alerted when CVE-2023-7234 or the next vulnerability affects your stack