CVE-2026-63362
Received Received - Intake

Unsigned Integer Underflow in open62541 DoS Vulnerability

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: ICS-CERT

Description
An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-31
AI Q&A
2026-07-31
EPSS Evaluated
N/A
NVD
CVE-2026-63362
EUVD
EUVD-2026-51336

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
open62541 open62541 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unsigned integer underflow in the PubSub signature verification path of open62541. It allows a remote attacker to cause a denial of service by sending a specially crafted UDP packet.

Detection Guidance

This vulnerability involves an unsigned integer underflow in PubSub signature verification in open62541, potentially causing a denial of service via crafted UDP packets. Detection requires monitoring for unexpected crashes or resource exhaustion in open62541 services handling PubSub traffic.

Impact Analysis

The vulnerability can lead to system crashes or service disruption due to a denial of service attack. It may affect applications using open62541 for PubSub communication over UDP.

Compliance Impact

This vulnerability is a denial of service issue caused by an unsigned integer underflow in PubSub signature verification. It does not directly impact data confidentiality or integrity but could disrupt system availability. Compliance impact depends on system criticality and redundancy; however, the provided context does not specify direct effects on GDPR or HIPAA compliance.

Mitigation Strategies

Update open62541 to the latest patched version to address the unsigned integer underflow in PubSub signature verification. Monitor network traffic for unusual UDP packets targeting the affected service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63362. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart