CVE-2023-7234 Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs
An attacker can inject malicious content into logs via the client description field, potentially affecting log integrity or downstream log processing systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7234?
CVE-2023-7234 is a medium-severity vulnerability in Integration Objects OPC UA Server Toolkit, published on 16 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.
Which versions are affected by CVE-2023-7234?
It affects 1 product.
Products include Integrationobjects Opc Ua Server Toolkit.
How do I fix CVE-2023-7234?
No fix has been published for CVE-2023-7234 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-7234 being exploited?
There is no known exploitation of CVE-2023-7234 in the wild and no public exploit code.
Sources
Also known as GHSA-j8f3-4cqg-mhw4.