En bref
- CVE-2018-7559 est une vulnérabilité MOYENNE (CVSS 5.3) touchant OPCFoundation.NetStandard.Opc.Ua, ua-.net-legacy (opcfoundation), ua-.netstandard (opcfoundation).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 66.9% des vulnérabilités.
- Correctif : mettre à jour vers 1.3.352.12 ou plus récent.
Description
An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.
NVD description
An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.
Autres vulnérabilités de OPCFoundation.NetStandard.Opc.Ua
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free