CVE-2023-32170 is an improper input validation vulnerability affecting Unified Automation UaGateway OPC UA Server, specifically within its handling of client certificates. This flaw allows a remote attacker to trigger a denial-of-service condition by presenting a malformed certificate, provided the target user accepts the client certificate. Rated Medium severity with a CVSS score of 6.5, it requires user interaction and has a high impact on availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.5.13.487CPE matchmatch criteria | cpe:2.3:a:unified-automation:uagateway:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.