CyberRota Analysis
AI-GeneratedThe vulnerability affects the open62541 library versions up to 1.5.5, specifically within the responseReadNamespacesArray function, which can lead to a null pointer dereference due to improper handling of the Server_NamespaceArray argument. Although the severity is classified as low, the potential for remote exploitation exists, albeit with a high complexity level. Organizations utilizing this library should prioritize patching or mitigating this vulnerability to prevent potential exploitation, especially if they operate in environments where remote access is a concern.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the component Shared Client Library. Such manipulation of the argument Server_NamespaceArray leads to null pointer dereference. The attack can be executed remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit is publicly available and might be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.