Medium, CVSS 6.5NuGetPublished
Security Update for the OPC UA .NET Standard Stack
CVE-2024-42513 · GHSA-4rcc-7pg7-f57f
- Affected
- NuGet opcfoundation.netstandard.opc.ua.bindings.https < 1.5.374.158
- Fixed in
- 1.5.374.158· Vendor fix available
- Issue
- This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.
Recommended action: Upgrade to 1.5.374.158 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.