CVE-2024-10085 — Schneider Electric / EcoStruxure™ OPC UA Server Expert

CVE-2024-10085

Schneider Electric / EcoStruxure™ OPC UA Server Expert PUBLISHED

Description (CNA)

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ OPC UA Server Expert	affected Versions prior to SV2.01 SP3
Schneider Electric / EcoStruxure™ Modicon Communication Server	affected All versions

CWE

CWE-770

References

https://download.se.com/files?p_Doc_Ref=SEVD-2025-287-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-287-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.