high7.8
CVE-2022-44725
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file.
Impact
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opcfoundation | Local Discovery Server | before 1.04.405.479 |
Weakness classification
References
- NVD record
- CVE.org record
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-44725.pdf
- https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-44725.pdf
- https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/