Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

ALTO 7.5CVE-2022-29865 · GHSA-fvxf-r9fw-49pc · Published 16/06/2022 · updated 17/06/2026

In breve

CVE-2022-29865 è una vulnerabilità ALTO (CVSS 7.5) che riguarda OPCFoundation.NetStandard.Opc.Ua.Core, ua .net standard stack (opcfoundation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 76.1% delle vulnerabilità.
Correzione: aggiornare a 1.4.368.58 o successiva.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.4.368.58`	`1.4.368.58`
ua .net standard stack opcfoundation	`< 1.4.368.58`	`1.4.368.58`

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.4.368.58

1.4.368.58

< 1.4.368.58

1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Altre vulnerabilità di OPCFoundation.NetStandard.Opc.Ua.Core

Vedi tutto →