CVE-2024-42512CWE-208

CVE-2024-42512

High · published February 11, 2025

CVSS v3.1
8.6
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00599 · 48.0th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2025-02-11T00:15Z
Affected products (1)
ProductVersionsFixed in
opcfoundation/ua_.net_standard_stack< 1.5.374.1581.5.374.158
References (2)
https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-858251.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 10 FEB 00:00Z
    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated…
    cvelistv5