OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ua-.net-legacy | Opcfoundation | - (including) | - (including) |
| Ua_.net_standard_stack | Opcfoundation | * | 1.4.365.48 (excluding) |