o6 Automation GmbH Open62541
cpe:2.3:a:open62541:open62541:*:*:*:*:*:*:*
- >= 1.5-rc1, < 1.5-rc2
A vulnerability exists in o6 Automation GmbH Open62541 versions 1.5-rc1 prior to 1.5-rc2, when PubSub and JSON are enabled. A crafted JSON message can lead to an out-of-bounds write, causing the decoder to overwrite memory beyond a heap-allocated array. This issue occurs before authentication, consistently crashing the process and corrupting memory.
Exploitation of this vulnerability leads to a denial-of-service condition and memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.