PT-2026-83710
CVE-2026-82623
·
تاريخ النشر
2026-08-31
·
تاريخ التحديث
2026-08-31
الوصف من
CVSS 4.0
5.5
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
open62541 versions prior to 1.5.6
Description
A remote attack can trigger a use after free condition within the History Backend component. This occurs specifically in the
UA DataValue backend copyRange() function located in the plugins/historydata/ua history data backend memory.c file. Use after free is a memory corruption issue where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.Recommendations
Update open62541 to a version newer than 1.5.5.
As a temporary mitigation, restrict access to the History Backend component to minimize the risk of remote exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾