CVE-2024-33862

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-05 · updated 2026-06-17
Weakness: CWE-770

Description

A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.

Affected products

Opcfoundation Ua-.Netstandard: before 1.05.374.54 — fixed in 1.05.374.54

How to fix

Upgrade to a fixed version: Opcfoundation Ua-.Netstandard 1.05.374.54. Check the vendor advisory for mitigations.

References

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-33862.pdf
https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-33862.pdf

Get alerted when CVE-2024-33862 or the next vulnerability affects your stack