Opcfoundation vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Opcfoundation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 13 products.

5.3CVE-2024-42513NuGetOPCFoundation.NetStandard.Opc.Ua.Bindings.Https+1
EPSS score
0.58%
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.8.6CVE-2024-42512NuGetOPCFoundation.NetStandard.Opc.Ua.Core+1
EPSS score
0.60%
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.7.4CVE-2019-19135org.eclipse.milosdk-client+2
EPSS score
1.04%
In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the network.5.3CVE-2023-31048NuGetOPCFoundation.NetStandard.Opc.Ua.Core+2
EPSS score
0.79%
The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may be seen remotely.7.5CVE-2023-27321NuGetOPCFoundation.NetStandard.Opc.Ua.Server+2
EPSS score
1.05%
OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC UA ConditionRefresh requests. By sending a large number of requests, an attacker can consume all available resources on the server. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-20505.7.5CVE-2023-32787opcfoundationua_java_legacy+3
EPSS score
1.17%
The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications.