Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.
Una vulnerabilidad en OPC UA .NET Standard Stack anterior a 1.5.374.158 permite que un atacante no autorizado eluda la autenticación de la aplicación cuando utiliza endpoints HTTPS.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | NONE |
| Availability Impact | NONE |
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Type: Secondary
Exploitability Score: 3.9
Impact Score: 1.4
| Source | Type | Description |
|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-305
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| opcfoundation | ua_.net_standard_stack | * | <built-in method update of dict object at 0x7fd319dd50c0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:opcfoundation:ua_.net_standard_stack:*:*:*:*:*:*:*:* |