CVE-2024-42512

high

Description

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-09

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5035

https://cert-portal.siemens.com/productcert/html/ssa-858251.html

Details

Source: Mitre, NVD

Published: 2025-02-10

Updated: 2026-10-15

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:P

Severity: High

CVSS v3

Base Score: 8.6

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L