CVE-2024-45526

Name of the Vulnerable Software and Affected Versions: OPC Foundation OPCFoundation/UA-.NETStandard versions 1.5.374.78 and earlier

Description: A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually. This issue allows an unauthorized attacker to trigger a gradual degradation in performance.

Recommendations: For versions 1.5.374.78 and earlier, update to a version that includes the security update for the OPC UA .NET Standard Stack to resolve the vulnerability. As a temporary workaround, consider restricting access to the server to minimize the risk of exploitation. Avoid using invalid credentials in requests to the affected server until the issue is resolved.