OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5

Risk Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to read any file on the file system.

CVEs (1)

Remediations

• Unified Automation has released software (login required) to address the .NET Framework vulnerabilities. OPC Foundation recommends users deploying OPC UA .NET products built against the .NET 4.5, 4.0, and 3.5 Frameworks should contact the product supplier to determine if an update is needed. Users should also consider upgrading to a version of the product using .NET 4.5.2 Framework or later. It is recommended users avoid using the end-of-life version of the .NET Framework due to the risk of unpatched vulnerabilities.

Affected Vendors

Affected Products (1)

Affected Sectors

Multiple