CVE-2023-32171

CVE-2023-32171 is a Null Pointer Dereference Denial-of-Service vulnerability affecting Unified Automation UaGateway OPC UA Server. This flaw, specifically within the ImportCsv method, allows an authenticated remote attacker to craft an XML payload that triggers a null pointer dereference, leading to a denial-of-service condition. The vulnerability has a CVSS score of 6.5 (Medium), indicating that it can be exploited over the network with low attack complexity, requiring prior authentication, and resulting in high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness at this time.