Ua-.net-Legacy vulnerabilitiesRanked by how likely they are to be used.

Product5 versions
The short answer

Ua-.net-Legacy is made by Opcfoundation. We track 5 published vulnerabilities in it, across 5 versions. None of them is on the list of flaws known to be exploited today. If you run Ua-.net-Legacy, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Ua-.net-Legacy vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Ua-.net-Legacy's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Ua-.net-Legacy flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 1.9%

    OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

    CVSS7.5Published20 May 2021
  2. 1.6%

    An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.

    CVSS8.2Published14 Sep 2018
  3. 1.2%

    An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13.

    CVSS5.3Published13 Jun 2018
  4. 1.0%

    Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.

    CVSS8.8Published14 Jun 2018
  5. 0.3%

    Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

    CVSS5.3Published3 Oct 2018
Precursor Intelligence

Running Ua-.net-Legacy? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 5 published vulnerabilities listed under the name Ua-.net-Legacy, across 5 versions.

None of Ua-.net-Legacy's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Ua-.net-Legacy. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.