ICS OPC UA Unlimited Persistent Subscriptions Denial of Service (CVE-2022-24375) state 1-F/Flow

Rule ID

1238334

Severity

High

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Impact

Denial of service

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A