CyberRota Analysis
AI-GeneratedA use-after-free vulnerability in open62541 version 1.5.5 affects the server-side MonitoredItem callback, where the UA_Subscription_localPublish improperly accesses a deleted MonitoredItem. This flaw can be exploited by remote attackers to induce a denial of service, disrupting the availability of the affected service. Organizations utilizing open62541 should prioritize patching this vulnerability to mitigate potential service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local MonitoredItem. This allows a remote attacker to cause a denial of service.