CVE-2018-12087: Medium severity opc foundation ua nodeset vulnerability
Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-12087?
CVE-2018-12087 is a vulnerability that allows attackers with control over a piece of network infrastructure to decrypt passwords in OPC Foundation UA Client Applications communicating without security.
What is the severity of CVE-2018-12087?
The severity of CVE-2018-12087 is medium with a severity value of 5.3.
Which software is affected by CVE-2018-12087?
The OPC Foundation UA Client Applications, specifically the Opcfoundation Ua-.net-legacy versions 1.03.342 and below, and the Opcfoundation Ua-.netstandard versions 1.4.353.15 and below, are affected by CVE-2018-12087.
How can attackers exploit CVE-2018-12087?
Attackers with control over network infrastructure can exploit CVE-2018-12087 to decrypt passwords in OPC Foundation UA Client Applications that are communicating without security.
Where can I find more information about CVE-2018-12087?
You can find more information about CVE-2018-12087 in the OPC Foundation Security Bulletin available at https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12087.pdf