73 matches found
CVE-2024-42512
The OPC UA .NET Standard Stack (versions before 1.5.374.158 ) is vulnerable to an authentication bypass (CWE-208) caused by time differences during token comparison when the deprecated Basic128Rsa15 security policy is enabled. An unauthorized attacker can exploit this deficiency to bypass applica...
CVE-2024-42513
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints...
CVE-2024-42513: Authentication Bypass by Primary Weakness
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints...
CVE-2024-42513
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints...
PT-2025-6085
Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack versions prior to 1.5.374.158 Description The issue allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. Recommendations For versions prio...
GHSA-7VFH-CQPC-4267 Security Update for the OPC UA .NET Standard Stack
This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...
PT-2024-40436
Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack affected versions not specified Description The issue allows an unauthorized attacker to cause a significant increase in memory consumption. Recommendations At the moment, there is no information about a newer versio...
Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-R7PQ-3X6P-7JCM Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-FVXF-R9FW-49PC Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that - allows a malicious client or server to bypass the application authentication mechanism - and allow a connection to an untrusted peer...
Memory corruption
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29865
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
Authentication flaw
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
Code injection
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...