Security Update for the OPC UA .NET Standard Stack

MEDIO 5.3CVE-2024-45526 · GHSA-7vfh-cqpc-4267 · Published 22/10/2024 · updated 17/06/2026

In breve

CVE-2024-45526 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda OPCFoundation.NetStandard.Opc.Ua, OPCFoundation.NetStandard.Opc.Ua.Core.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 43.1% delle vulnerabilità.
Correzione: aggiornare a 1.5.374.118 o successiva.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua NuGet	`< 1.5.374.118`	`1.5.374.118`
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.5.374.118`	`1.5.374.118`

Description

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance.

NVD description

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually.

References

OPCFoundation/UA-.NETStandard security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2024-45526 · ADVISORY
files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-45526.pdf · WEB
OPCFoundation/UA-.NETStandard · PACKAGE

Altre vulnerabilità di OPCFoundation.NetStandard.Opc.Ua

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

OPCFoundation.NetStandard.Opc.Ua

NuGet

< 1.5.374.118

1.5.374.118

OPCFoundation.NetStandard.Opc.Ua.Core

NuGet

< 1.5.374.118

1.5.374.118

Description

This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to trigger a gradual degradation in performance.

NVD description

Altre vulnerabilità di OPCFoundation.NetStandard.Opc.Ua

Vedi tutto →