CVE-2023-32171

Name of the Vulnerable Software and Affected Versions Unified Automation UaGateway (affected versions not specified)

Description This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this issue. The specific flaw exists within the ImportCsv method, where a crafted XML payload can cause a null pointer dereference, allowing an attacker to leverage this issue to create a denial-of-service condition on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.