ICS OPC UA Unlimited Persistent Subscriptions Denial of Service (CVE-2022-24375) state 0

Rule ID

1238331

Severity

High

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Allow

References

Keywords

N/A