CVE-2022-29863: 
C# vulnerability analysis and mitigation

OPC UA .NET Standard Stack 1.04.368 allows remote attackers to cause a crash via a crafted message that triggers excessive memory allocation. The vulnerability was disclosed on June 16, 2022, and is tracked as CVE-2022-29863. This vulnerability affects the OPC Foundation's UA .NET Standard Stack versions up to (excluding) 1.4.368.58 (NVD, CVE).

The vulnerability is classified as CWE-770 (Allocation of Resources Without Limits or Throttling). It has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, and a CVSS v2.0 base score of 5.0 (MEDIUM) with the vector string (AV:N/AC:L/Au:N/C:N/I:N/A:P) (NVD).

When exploited, this vulnerability can cause the application to crash through excessive memory allocation, potentially leading to a denial of service condition. The impact is primarily on the availability of the system, with no direct effect on confidentiality or integrity (NVD).

Users should upgrade to OPC UA .NET Standard Stack version 1.4.368.58 or later to address this vulnerability. The OPC Foundation has released security patches and provided guidance in their security bulletin (OPC Security, OPC Bulletin).