Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core

MEDIO 4.4CVE-2020-29457 · GHSA-mjww-934m-h4jw · Published 16/02/2021 · updated 17/06/2026

En resumen

CVE-2020-29457 es una vulnerabilidad MEDIO (CVSS 4.4) que afecta a OPCFoundation.NetStandard.Opc.Ua.Core, ua-.netstandard (opcfoundation).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.31%, mayor que el 24.1% de las vulnerabilidades.
Solución: actualizar a 1.4.365.10 o posterior.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.4.365.10`	`1.4.365.10`
ua-.netstandard opcfoundation	`< 1.4.365.10`	`1.4.365.10`

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates.

NVD description

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.4.365.10

1.4.365.10

< 1.4.365.10

1.4.365.10

Description

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates.

NVD description

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection.

Más vulnerabilidades de OPCFoundation.NetStandard.Opc.Ua.Core

Ver todo →