CVE-2025-1468CWE-203

CODESYS Control V3 - OPC UA Server Authentication bypass

High · published March 18, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00638 · 49.9th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2025-03-18T11:03Z
EPSS history
Timeline
  • 18 MAR 11:03Z
    CODESYS Control V3 - OPC UA Server Authentication bypass
    cvelistv5