Medium severity6.5NVD Advisory· Published May 3, 2024· Updated Jun 17, 2026
CVE-2023-32171
CVE-2023-32171
Description
Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability.
The specific flaw exists within the ImportCsv method. A crafted XML payload can cause a null pointer dereference. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-20495.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:unified-automation:uagateway:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:unified-automation:uagateway:*:*:*:*:*:*:*:*range: <1.5.13.487
- (no CPE)
- (no CPE)range: 1.5.12.482
Patches
Vulnerability mechanics
References
2- www.zerodayinitiative.com/advisories/ZDI-23-776/nvdThird Party Advisory
- documentation.unified-automation.com/uagateway/1.5.14/CHANGELOG.txtnvdRelease Notes
News mentions
0No linked articles in our index yet.