CVE-2024-27201

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 19.00.0057

Description An improper input validation issue exists in the OAS Engine User Configuration functionality. This can be exploited by sending a specially crafted series of network requests, leading to unexpected data in the configuration.

Recommendations For version 19.00.0057, consider restricting access to the OAS Engine User Configuration functionality until a fix is available. As a temporary workaround, review and validate all network requests to prevent unexpected data in the configuration. At the moment, there is no information about a newer version that contains a fix for this vulnerability.