Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

ALTO 7.5CVE-2022-29865 · GHSA-fvxf-r9fw-49pc · Published 16/06/2022 · updated 17/06/2026

Em resumo

CVE-2022-29865 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta OPCFoundation.NetStandard.Opc.Ua.Core, ua .net standard stack (opcfoundation).
Chance de exploração nos próximos 30 dias (EPSS): 1.6%, maior que 76.1% das vulnerabilidades.
Correção: atualize para 1.4.368.58 ou posterior.

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.4.368.58`	`1.4.368.58`
ua .net standard stack opcfoundation	`< 1.4.368.58`	`1.4.368.58`

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.4.368.58

1.4.368.58

< 1.4.368.58

1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Mais vulnerabilidades de OPCFoundation.NetStandard.Opc.Ua.Core

Ver tudo →