Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core

高危 7.5CVE-2022-29865 · GHSA-fvxf-r9fw-49pc · Published 16/06/2022 · updated 17/06/2026

要点

CVE-2022-29865 是影响 OPCFoundation.NetStandard.Opc.Ua.Core, ua .net standard stack (opcfoundation) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.6%，高于 76.1% 的漏洞。
修复：升级到 1.4.368.58 或更高版本。

Package	Affected versions	Patched versions
OPCFoundation.NetStandard.Opc.Ua.Core NuGet	`< 1.4.368.58`	`1.4.368.58`
ua .net standard stack opcfoundation	`< 1.4.368.58`	`1.4.368.58`

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.4.368.58

1.4.368.58

< 1.4.368.58

1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that

allows a malicious client or server to bypass the application authentication mechanism
and allow a connection to an untrusted peer.

NVD description

OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

OPCFoundation.NetStandard.Opc.Ua.Core 的其他漏洞

查看全部 →