title: Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs
description:
OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field.
problem types: CWE-117
affected:
{
defaultStatus: unaffected
product: OPC UA Server Toolkit
vendor: Integration Objects
versions:
status: affected, version: all versions
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
workarounds:
Integration Objects has not responded to requests to work with CISA to mitigate these vulnerabilities. Developers using affected versions of OPC UA Server Toolkit are invited to contact  Integration Objects for additional information. https://integrationobjects.com//ask-a-question/