CVE-2022-29862: 
C# vulnerability analysis and mitigation

An infinite loop vulnerability was discovered in OPC UA .NET Standard Stack version 1.04.368, disclosed on June 16, 2022. The vulnerability allows remote attackers to cause the application to hang by sending a crafted message (NVD, AttackerKB).

The vulnerability is classified as CWE-835 (Loop with Unreachable Exit Condition). It has been assigned a CVSS v3.1 base score of 7.5 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability can be exploited remotely with low attack complexity, requires no privileges or user interaction, and primarily affects system availability (CISA).

Successful exploitation of this vulnerability can lead to a denial-of-service condition where the affected application becomes unresponsive due to the infinite loop. The impact is limited to availability, with no direct effect on confidentiality or integrity of the system (NVD).

The vulnerability can be triggered by sending a specially crafted message to the affected application. No authentication is required to exploit this vulnerability, making it accessible to remote attackers. The attack vector is network-based and requires low complexity to execute (AttackerKB).

The recommended mitigation is to update to OPC UA .NET Standard Stack version 1.04.369 or later. As a general security measure, it is recommended to protect network access to devices with appropriate mechanisms and configure the environment according to operational guidelines for industrial security (CISA).