OPC UA .NET Stack 1.5.374.158 auth bypass via HTTPS
CVE-2024-42513 Published on February 10, 2025
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.
Vulnerability Analysis
CVE-2024-42513 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
Products Associated with CVE-2024-42513
Want to know whenever a new CVE is published for Siemens Simatic Wincc? stack.watch will email you.
Vulnerable Packages
The following package name and versions may be associated with CVE-2024-42513
| Package Manager | Vulnerable Package | Versions | Fixed In |
|---|---|---|---|
| nuget | OPCFoundation.NetStandard.Opc.Ua.Bindings.Https | < 1.5.374.158 | 1.5.374.158 |
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.