CVEs-PoC/2021/CVE-2021-27432.md

### [CVE-2021-27432](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27432)
![](https://img.shields.io/static/v1?label=Product&message=OPC%20Foundation%20OPC%20UA%20.NET%20Standard%20and%20OPC%20UA%20.NET%20Legacy&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=OPC%20UA%20.NET%20Standard%20versions%20prior%20to%201.4.365.48%20and%20OPC%20UA%20.NET%20Legacy%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=UNCONTROLLED%20RECURSION%20CWE-674&color=brightgreen)

### Description

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Castanea02/OPCUA-exploit-framework
- https://github.com/claroty/opcua-exploit-framework
- https://github.com/jonggleac/jogggleac-OPCUA-exploit-framework
- https://github.com/sumi-2/opcua-exploit-framework-main