CVE-2022-2967: Prosysopc Ua Modbus Server

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.

Affected products

• Prosysopc Ua Modbus Server: before 1.4.20 (fixed in 1.4.20)
• Prosysopc Ua Simulation Server: before 5.4.0 (fixed in 5.4.0)

Published 2023-01-03. Last modified 2026-06-17.