Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
Una vulnerabilidad en PC UA .NET Standard Stack anterior a 1.5.374.158 permite que un atacante no autorizado eluda la autenticación de la aplicación cuando la política de seguridad obsoleta Basic128Rsa15 está habilitada.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | LOW |
| Availability Impact | LOW |
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Type: Secondary
Exploitability Score: 3.9
Impact Score: 4.7
| Source | Type | Description |
|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-208
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| opcfoundation | ua_.net_standard_stack | * | <built-in method update of dict object at 0x7fd369d6ce00> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:opcfoundation:ua_.net_standard_stack:*:*:*:*:*:*:*:* |