76 matches found
CVE-2024-42512
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled...
CVE-2024-42513: Authentication Bypass by Primary Weakness
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints...
CVE-2024-42513
The OPC UA .NET Standard Stack (specifically the OPCFoundation.NetStandard.Opc.Ua component) is vulnerable to an authentication bypass in versions before 1.5.374.158 . The root cause is improper authentication enforcement stemming from weaknesses in how the stack handles HTTPS endpoints , which a...
CVE-2024-42512
The OPC UA .NET Standard Stack (versions before 1.5.374.158 ) is vulnerable to an authentication bypass (CWE-208) caused by time differences during token comparison when the deprecated Basic128Rsa15 security policy is enabled. An unauthorized attacker can exploit this deficiency to bypass applica...
PT-2025-6085
Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack versions prior to 1.5.374.158 Description The issue allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled. Recommendations For versions prio...
GHSA-7VFH-CQPC-4267 Security Update for the OPC UA .NET Standard Stack
This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance...
PT-2024-40436
Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack affected versions not specified Description The issue allows an unauthorized attacker to cause a significant increase in memory consumption. Recommendations At the moment, there is no information about a newer versio...
Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-R7PQ-3X6P-7JCM Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message...
GHSA-FVXF-R9FW-49PC Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that - allows a malicious client or server to bypass the application authentication mechanism - and allow a connection to an untrusted peer...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
Memory corruption
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
CVE-2022-29866
The CVE-2022-29866 issue affects OPC UA .NET Standard Stack 1.04.368. A remote attacker can trigger a crafted request that causes Uncontrolled Resource Consumption, leading to memory exhaustion on the server. The vulnerability is described consistently across multiple records (NVD entry, Red Hat ...
CVE-2022-29866
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...
CVE-2022-29865
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials...
CVE-2022-29862
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message...