Detections
Analytics
SCA: security update for OPCFoundation.NetStandard.Opc.Ua (GHSA-gr4c-5rq6-cgh3)
medium Tenable Cloud Security Plugin ID 423468
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and
OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA
applications can allow a remote attacker to determine a Server's private key by sending carefully
constructed bad UserIdentityTokens as part of an oracle attack. (CVE-2018-7559)
See Also
Plugin Details
Severity: Medium
ID: 423468
Version: Revision 1.4
Type: Local
Family: SCA Checks
Published: 3/29/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 2.6
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:N/A:N
CVSS Score Source: CVE-2018-7559
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.6
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/16/2018
Vulnerability Publication Date: 6/13/2018
Reference Information
CVE: CVE-2018-7559