CVE-2023-32172

CVE-2023-32172 is a Use-After-Free Denial-of-Service vulnerability affecting Unified Automation UaGateway OPC UA Server products. This flaw, residing in the ImportXML function, allows an authenticated remote attacker to cause a denial-of-service condition due to insufficient validation of object existence before operations. Rated Medium severity with a CVSS score of 6.5, it requires low privileges and network access to achieve high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.