Buffer Overflow in open62541 v1.5.5 via Discovery/LDS

Executive Summary

This is a buffer overflow vulnerability in open62541 version 1.5.5. It allows a remote attacker to cause a denial of service by exploiting the Discovery/LDS handling mechanism.

Useful 0 Not Useful 0

Detection Guidance

Detecting this buffer overflow vulnerability in open62541 v1.5.5 requires monitoring for abnormal behavior in Discovery/LDS handling. Check for crashes, high CPU usage, or memory corruption in open62541 processes. Use network traffic analysis tools like Wireshark to inspect OPC UA discovery packets for malformed data.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to crash the affected system, leading to service disruption and potential downtime for applications relying on open62541.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is a buffer overflow in open62541 v1.5.5 that allows remote attackers to cause denial of service. It does not directly impact data confidentiality or integrity but could disrupt system availability. Compliance impact depends on system role and data processed, but no specific regulatory violations are mentioned in the provided context.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade open62541 to a patched version if available. If upgrading is not possible, disable the Discovery/LDS service if not required. Implement network segmentation to limit exposure. Monitor logs for signs of exploitation attempts.

Useful 0 Not Useful 0