CVE-2024-42512: High severity opc foundation .net standard stack vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h958-fxgg-g7w3. This link is maintained to preserve external references.
Original Description Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
Other sources
This security update resolves a vulnerability in the OPC UA .NET Standard Stack that allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
Note that the Basic128Rsa15 is disabled by default so most users will not be affected. When this patch is applied the Server closes all channels using the Basic128Rsa15 if an attack is detected. This introduces a DoS before any compromise can occur which is preferable to a compromise. To prevent this failure, applications must stop using Basic128Rsa15.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42512?
CVE-2024-42512 is classified as a high severity vulnerability that allows unauthorized access under certain conditions.
How do I fix CVE-2024-42512?
To fix CVE-2024-42512, upgrade to the version 1.5.374.158 or later of the OPC UA .NET Standard Stack.
What is the impact of CVE-2024-42512 on affected systems?
The impact of CVE-2024-42512 is that attackers can bypass application authentication when the Basic128Rsa15 security policy is enabled.
Which software versions are vulnerable to CVE-2024-42512?
Versions of OPC Foundation OPC UA .NET Standard Stack prior to 1.5.374.158 are vulnerable to CVE-2024-42512.
Is the Basic128Rsa15 security policy safe to use with CVE-2024-42512?
Using the Basic128Rsa15 security policy is not safe with CVE-2024-42512 as it can allow attackers to bypass authentication.