Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

높음 7.5CVE-2022-29865 · GHSA-fvxf-r9fw-49pc · Published 16/06/2022 · updated 17/06/2026

요약

CVE-2022-29865은(는) OPCFoundation.NetStandard.Opc.Ua.Core, ua .net standard stack (opcfoundation)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.6%, 전체 취약점의 76.1%보다 높음.
조치: 1.4.368.58 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.4.368.58`	`1.4.368.58`
ua .net standard stack opcfoundation	`< 1.4.368.58`	`1.4.368.58`

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.4.368.58

1.4.368.58

< 1.4.368.58

1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

OPCFoundation.NetStandard.Opc.Ua.Core의 다른 취약점

모두 보기 →