Hard-coded File Path Vulnerability in OPC Foundation Local Discovery Server (LDS)

CVE-2022-44725 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).

Learn more about our Cis Benchmark Audit For Server Software.