In short
- CVE-2022-29865 is a HIGH (CVSS 7.5) vulnerability affecting OPCFoundation.NetStandard.Opc.Ua.Core, ua .net standard stack (opcfoundation).
- Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.1% of all vulnerabilities.
- Fix: update to 1.4.368.58 or later.
Description
A vulnerability was discovered in the OPC UA .NET Standard Stack that
- allows a malicious client or server to bypass the application authentication mechanism
- and allow a connection to an untrusted peer.
NVD description
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.
More vulnerabilities in OPCFoundation.NetStandard.Opc.Ua.Core
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free