CVE-2024-42513

Description

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-09

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5034

https://cert-portal.siemens.com/productcert/html/ssa-858251.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS