| Package | Affected versions | Patched versions |
|---|---|---|
| asyncua | < 0.9.96 | 0.9.96 |
| opcua-asyncio | < 0.9.96 | 0.9.96 |
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication.
Note:
This issue is a result of missing checks for services that require an active session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free