[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdchdLCmAZf-Pa1prZ6xaBk-oq2fTdF73L4KLJyebyA0":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":21,"status":22,"created_at":23,"published_at":24,"article":25,"tags":29,"podcasts":42,"controls":43},"3fadbafb-02a8-4910-8766-e2ec49176229","opc-ua-lds-installer-flaw-enables-privilege-escalation-via-local-access","3bab2716-63c9-4778-891e-2ba90f84a6ab","OPC UA LDS Installer Flaw Enables Privilege Escalation via Local Access","A vulnerability in OPC Foundation's OPC UA LocalDiscoveryServer (LDS) installers prior to version 1.04.420 allows attackers with local access to execute arbitrary commands with elevated privileges during the installation process. The root cause lies in insufficient input validation and insecure handling of console interactions within the installer itself — a class of vulnerability often overlooked during software supply chain reviews. This is particularly significant in industrial and operational technology (OT) environments where OPC UA is widely deployed, as privilege escalation can lead to full system compromise. Organizations that delay patching installer components or fail to track third-party software versions are especially exposed. Prompt upgrades to version 1.04.420 or later are essential to close this attack vector.","**Immediate actions:**\n- Upgrade all instances of OPC UA LocalDiscoveryServer to version 1.04.420 or later as directed by OPC Foundation.\n- Restrict local physical and remote access to systems where OPC UA LDS is installed to authorized personnel only.\n- Audit current installations to identify any systems running vulnerable versions below 1.04.420.\n\n**Long-term improvements:**\n- Maintain a comprehensive software inventory (SBOM) that includes all third-party and OT\u002FICS components to enable rapid vulnerability identification.\n- Implement a formal patch management policy that covers industrial and operational technology software, not just IT assets.\n- Enforce least-privilege principles so that installer processes cannot escalate to high-privilege execution without explicit authorization.\n\n**Detection measures:**\n- Deploy endpoint detection tools capable of alerting on unexpected privilege escalation events during software installation processes.\n- Enable logging of all installation activities on OT\u002FICS systems and forward logs to a centralized SIEM for anomaly detection.\n- Schedule regular vulnerability scans that include OT-specific software components and cross-reference results against CVE databases.",[12,13,14,15,16,17,18,19,20],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-82: Guide to ICS\u002FOT Security","NIST SI-2: Flaw Remediation","NIST AC-6: Least Privilege","NIST CM-11: User-Installed Software","IEC 62443-3-3: System Security Requirements for Industrial Automation","ITIL Change Management: Controlled Software Deployment",{},"published","2026-09-03T18:22:59.566752+00:00","2026-09-03T18:22:59.242+00:00",{"id":7,"url":26,"slug":27,"title":28},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-246-01","opcfoundation-opc-ua-localdiscoveryserver-lds-85284d","OPCFoundation OPC UA LocalDiscoveryServer (LDS)",[30,36],{"id":31,"name":32,"slug":33,"description":34,"color":35},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":37,"name":38,"slug":39,"description":40,"color":41},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[],[44,47,51],{"slug":39,"name":45,"problem":46},"Automated patch management","Known holes get closed in days, not months.",{"slug":48,"name":49,"problem":50},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":52,"name":53,"problem":54},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]