Lucene search

K
zdiDaan Keuper & Thijs Alkemade from ComputestZDI-22-856
HistoryJun 16, 2022 - 12:00 a.m.

(Pwn2Own) OPC Foundation UA .NET Standard Improper Input Validation Authentication Bypass Vulnerability

2022-06-1600:00:00
Daan Keuper & Thijs Alkemade from Computest
www.zerodayinitiative.com
18

0.004 Low

EPSS

Percentile

73.8%

This vulnerability allows remote attackers to bypass authentication on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of certificates. The issue results from the lack of proper validation of a user-supplied certificate. An attacker can leverage this vulnerability to bypass authentication on the system.

0.004 Low

EPSS

Percentile

73.8%