CVE-2024-42513CWE-305

CVE-2024-42513

Medium · published February 11, 2025

CVSS v3.1
5.3
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00577 · 46.8th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2025-02-11T00:15Z
Affected products (1)
ProductVersionsFixed in
opcfoundation/ua_.net_standard_stack< 1.5.374.1581.5.374.158
References (2)
https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-858251.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 10 FEB 00:00Z
    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS…
    cvelistv5