CVE-2022-37013

Name of the Vulnerable Software and Affected Versions Unified Automation OPC UA C++ Demo Server version 1.7.6-537

Description This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of certificates. A crafted certificate can force the server into an infinite loop, allowing an attacker to create a denial-of-service condition on the system.

Recommendations For Unified Automation OPC UA C++ Demo Server version 1.7.6-537, consider disabling the certificate handling functionality until a patch is available to prevent exploitation. Restrict access to the server to minimize the risk of denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this issue.