PT-2025-6086

CVE-2024-42513

Published

2025-02-10

Updated

2025-10-02

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions OPC UA .NET Standard Stack versions prior to 1.5.374.158

Description A vulnerability in the OPC UA .NET Standard Stack allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Recommendations For versions prior to 1.5.374.158, update to version 1.5.374.158 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTPS endpoints until a patch is applied.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-305: Authentication Bypass by Primary Weakness

CWE-290: Authentication Bypass by Spoofing

Related identifiers

CVE-2024-42513

GHSA-4RCC-7PG7-F57F