Security Update for the OPC UA .NET Standard Stack

MEDIUM 5.3CVE-2024-42513 · GHSA-4rcc-7pg7-f57f · Published 10/02/2025 · updated 15/10/2026

In short

CVE-2024-42513 is a MEDIUM (CVSS 5.3) vulnerability affecting OPCFoundation.NetStandard.Opc.Ua.Bindings.Https, ua .net standard stack (opcfoundation).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 47.6% of all vulnerabilities.
Fix: update to 1.5.374.158 or later.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Bindings.Https NuGet	`< 1.5.374.158`	`1.5.374.158`
ua .net standard stack opcfoundation	`< 1.5.374.158`	`1.5.374.158`

Description

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

NVD description

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free