CVE-2023-34317

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 18.00.0072

Description An improper input validation vulnerability exists in the OAS Engine User Creation functionality. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to trigger this vulnerability.

Recommendations For Open Automation Software OAS Platform version 18.00.0072, consider disabling the OAS Engine User Creation functionality until a patch is available to prevent exploitation. Restrict access to the configuration to minimize the risk of unexpected data modifications. Avoid using the vulnerable functionality in the OAS Engine until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.