Version 5.2.2

Build: 5.2.2-9

Release date: 11.05.22

This is a minor release of Prosys OPC UA Simulation Server featuring security improvements, bug fixes and a wider support for model import in different scenarios. New features include support for setting constant value to standard structures and enumerations. A new installer for 64bit ARM Linux is also available. The application is also updated to use Prosys OPC UA SDK for Java version 4.8.0, see the release notes.

Security Fix

The security fix (via updated SDK version) fixes a scenario where an attacker could cause the server to starve an internal thread pool, causing a Denial of Service (DoS). The exploit enables an unauthorized attacker to block the server applications so that they will no longer be able to serve client applications. Thus, we recommend everyone to update to this version. For more details see Pwn2Own resource exhaustion exploit.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.8.0.

  • New: Linux AArch64 install script for 64bit ARM.

  • New: Added support for standard structure and enumeration data types for constant value simulation.

  • Improvement: Improved support and fault tolerance for NodeSet import in some special cases such as with Siemens S7 PLC information models.

  • Fixed: Several bugs especially related to namespace handling.

Version 5.2.0

Build: 5.2.0-390

Release date: 16.03.22

This is a release of Prosys OPC UA Simulation Server featuring improvements to multiple aspects of modelling and simulation. Some of the highlights include customisable NodeIds, support for array variables and more data types as well as the possibility to export namespaces as a NodeSet file. The application is also updated to use Prosys OPC UA SDK for Java version 4.7.2, see the release notes. Log4j2 library has been updated to version 2.17.2.

Log4j2 Update

This version updates the used log4j2 library from version 2.16.0 to 2.17.2. See https://logging.apache.org/log4j/2.x/security.html for more information. There are 2 new CVEs after 2.16.0. However, as far as we understand in practice they have no impact per se, even if technically we are affected by one of them. Regardless, we do recommend everyone to update to this version. For the CVE-2021-45105, the default logging configuration does not include MDC in the pattern, thus we should not be affected.

For the CVE-2021-44832, per apache’s page: "(previous versions) are vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify the logging configuration file". So the filesystem would have to be compromised for this to happen. In general our applications do not expect a hostile (local) environment. Typically this kind of vulnerability could be used for a privilege escalation attack, but with Simulation Server the user running the application should also be the one who has the writing permissions to the configuration file. Simulation Server will create configuration files, per user, when that user starts the application. Thus, there is nothing to escalate to, the attacker could just do already everything they could do via Simulation Server in a more complicated way. Thus, this CVE in practice has no impact, but we still do recommend to update just in case.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.7.2.

  • Updated log4j2 to version 2.17.2.

  • New: Support for array variables. Created Variables have an Array Size parameter that defines the size of a one-dimensional array of duplicated values.

  • New: Exporting namespace as a NodeSet file (available in Professional Edition only). Right-clicking an instance namespace (namespace with no types) and clicking Export Namespace…​ will save the namespace in a file using the NodeSet format defined in the OPC UA specification .

  • New: Customisable NodeId. It is now possible to define the NodeId type (Numeric, String, Guid or Opaque) and value for newly created Nodes.

  • New: All instance namespaces (namespaces with no types) are modifiable (meaning that Nodes can be added or removed).

  • New: Added support for more data types for constant value simulation.

  • Improvement: Improved support for NodeSet import in some special cases.

  • Fixed: Setting a boolean constant signal value not working.

  • Fixed: Method creation and calling not working properly.

  • Fixed: Issues with optional member selection in instance creation dialog.

  • Fixed: Several smaller issues

  • Changed: Simulation view renamed to Value along with other terminology inside the view.

Version 5.1.4

Build: 5.1.4-361

Release date: 16.12.21

This is a security release of Prosys OPC UA Simulation Server. Everyone is recommended to update to this version.

Apache Foundation has released another version of log4j2 in order to fix a new CVE-2021-45046: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046. Per our understanding we would not be vulnerable to CVE-2021-45046, but just to be safe this release updates to log4j2 2.16.0.

Changes

  • Updated log4j2 to version 2.16.0

Version 5.1.2

Build: 5.1.2-358

Release date: 13.12.21

This is an emergency security release to fix the https://nvd.nist.gov/vuln/detail/CVE-2021-44228 "Log4Shell" attack.

Everyone is recommended to update to this version.

Mitigation strategies for older releases can be found in https://logging.apache.org/log4j/2.x/security.html, though it should be noted that due to the log4j2 version (2.8.2 or older) of previous releases the system property mitigation strategy cannot be used (the other 2 can be used).

Changes

  • Updated log4j2 to version 2.15.0

Version 5.1.0

Build: 5.1.0-349

Release date: 09.12.21

This is a release of Prosys OPC UA Simulation Server featuring bug fixes as well as performance and functionality improvements. There are also some new features, mainly the ability to simulate imported variables. The application is updated to use Prosys OPC UA SDK for Java version 4.6.2, see the release notes.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.6.2.

  • New: Ability to simulate imported variables. It is now possible to add signals to variables imported to Simulation Server from a NodeSet file (Professional Edition feature).

  • Improvement: Improved Namespaces view.

  • Improvement: Improved performance with large amount of Nodes.

  • Improvement: Faster start-up time in most cases.

  • Fixed: Multiple smaller bug fixes.

  • Fixed: Application fails to start when Bind Addresses contains invalid IP address.

Version 5.0.8

Build: 5.0.8-330

Release date: 28.05.21

This is a minor bug fix and security release of Prosys OPC UA Simulation Server. The application is updated to use Prosys OPC UA SDK for Java version 4.5.6, see the release notes.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.5.6.

  • Fixed: A number of smaller bugs.

Version 5.0.6

Build: 5.0.6-320

Release date: 12.05.21

This is a minor release of Prosys OPC UA Simulation Server fixing several bugs and adding some small features and performance improvements.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.5.4.

  • New: Reset signal values functionality. It is possible at any time to reset all signal values to their default values and also to choose if the values start from their default values during server start up.

  • Improvement: Improvements in performance and handling of large number of Nodes.

  • Improvement: Several improvements to the user interface in Simulation Views.

  • Fixed: A number of smaller bugs.

Version 5.0.4

Build: 5.0.4-284

Release date: 27.11.20

This is a minor release of Prosys OPC UA Simulation Server fixing several bugs and adding some small features and performance improvements.

Changes

  • Updated OPC UA base information model to version 1.04.7.

  • New: Added auto-update functionality to automatically or manually check for and install newer versions of the application.

  • New: Basic method simulation. Methods can be called and they return value null or 0 (if data type is number).

  • Improvement: Faster application start-up time.

  • Fixed: Several issues related to editing of Nodes, configuring of signals and importing of information models.

Version 5.0.2

Build: 5.0.2-242

Release date: 01.09.20

This is a minor release of Prosys OPC UA Simulation Server fixing several bugs discovered after the previous major release.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.4.0.

  • New: Live signal value preview graph.

  • Improvement: Better error feedback for problems that can arise when importing namespaces from NodeSet files.

  • Improvement: Better handling of ValueRank Attribute with simulated Variables.

  • Fixed: Connection failing if client has ApplicationName set to null.

  • Fixed: IPv6 enable/disable not working when Bind Addresses is set to All in the Endpoints View.

  • Fixed: Changes to signal parameters in Objects View were not saved in some instances.

  • Fixed: It is no longer possible to disable essential namespaces in Namespaces View.

  • Fixed: Reload from file…​ in Namespaces View not updating the model in some cases.

  • Fixed: Simulation configuration namespaces are now removed when parent namespace is removed in Namespaces View.

  • Changed: Minimum simulation interval limit lowered to 100 ms.

Version 5.0.0

Build: 5.0.0-214

Release date: 06.07.20

This is a major release of Prosys OPC UA Simulation Server. Starting from this version the Simulation Server features a new commercial Professional Edition unlocking the option to import custom information models.

This release brings major improvements to the customisation of the server address space and the configuration of simulation signals.

Changes

  • Uses Prosys OPC UA SDK for Java version 4.3.0.

  • New: Can now create Variables and Objects of any type present on the server.

  • New: Added new Types View for setting signals to types present on the server. All instances of a type can inherit the signal defined for the type.

  • New: Added new Namespaces View for managing the namespaces/information models present on the server.

  • Changed: Simulation View renamed to Objects View and revamped the user interface.