CVE-2024-42512

EPSS 0.05%
Published 10.02.2025 19:15:37
Last modified 29.09.2025 18:13:38
Source cve@mitre.org
Teams watchlist Login
Open Login

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Opcfoundation ≫ Ua .Net Standard Stack Version < 1.5.374.158

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.157

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.6	3.9	4.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-208 Observable Timing Discrepancy

Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-42512

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-42512

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-42512

EUVD