CVE-2024-42512

HIGH

OPC UA .NET Standard Stack <1.5.374.158 - Auth Bypass

Title source: llm
STIX 2.1

Description

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

References (1)

Core 1

Scores

CVSS v3 8.6
EPSS 0.0055
EPSS Percentile 41.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-208
Status published
Products (2)
nuget/OPCFoundation.NetStandard.Opc.Ua.Core 0 - 1.5.374.158NuGet
opcfoundation/ua_.net_standard_stack < 1.5.374.158
Published Feb 10, 2025
Tracked Since Feb 18, 2026