CVE-2024-42513

EPSS 0.03%
Veröffentlicht 10.02.2025 19:15:38
Zuletzt bearbeitet 02.10.2025 18:21:25
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opcfoundation ≫ Ua .Net Standard Stack Version < 1.5.374.158

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.055

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-305 Authentication Bypass by Primary Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-42513

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-42513

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-42513

EUVD