Eclipse Foundation Eclipse Milo
ID: 945e1646-a907-5746-8ed1-c7522d4db0c7
STIX ID: report--945e1646-a907-5746-8ed1-c7522d4db0c7
Feed Name: CISA Advisories
CISA published a vulnerability advisory for Eclipse Milo (OPC UA stack) detailing five vulnerabilities (multiple CVEs, CVSS v3 up to 8.2) that enable authorization bypass, information disclosure of session/security diagnostics, memory/resource exhaustion (server DoS), and a padding-oracle allowing password recovery; affected versions are 0.6.0 through 1.1.4 and the vendor recommends upgrading to Milo 1.1.5, with impacts noted for chemical, manufacturing, energy, and water sectors worldwide.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
