Application Authentication Bypass Vulnerability in OPC UA .NET Standard Stack
CVE-2024-42513

5.3MEDIUM

Key Information:

Vendor

OPC Foundation

Status
OPC UA .NET Standard Stack
Vendor
CVE Published:
10 February 2025

What is CVE-2024-42513?

A vulnerability has been identified in the OPC UA .NET Standard Stack prior to version 1.5.374.158, which permits unauthorized attackers to bypass authentication mechanisms when interacting with HTTPS endpoints. This flaw poses significant security risks, allowing potential threats to exploit authentication protocols and gain unauthorized access to sensitive data or system functionalities.

References

https://files.opcfoundation.org/SecurityBulletins/OPC%20F...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.