Machine-generated analysis · WAYSCloud LLM
Eclipse Milo versions 0.6.0 through 1.1.4 are affected by multiple high-severity vulnerabilities.
Context
The advisory concerns Eclipse Foundation Eclipse Milo, an OPC UA implementation, versions >=0.6.0 and <=1.1.4. The vulnerabilities may allow deletion of protected data, credential recovery, user impersonation, or denial-of-service. The advisory notes worldwide deployments in sectors such as chemical, energy, and water. No fix is available for 0.6.x releases, requiring migration to 1.1.5 or later.
Operator considerations
- Check: Verify which Eclipse Milo versions are deployed.
Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.
Read the full advisory on CISA →