CVE-2024-42513

MediumCVSS 5.3

Published: 10/02/2025(UTC)Updated: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.58%

46th percentile - higher than 46% of all known CVEs

Summary

A vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Risk Assessment

Unauthorized access to industrial systems may lead to operational security breaches. It poses a serious threat in OT environments.

Recommendation

Update OPC UA .NET Standard Stack to version 1.5.374.158 or later. Restrict access to HTTPS endpoints.

Other vulnerabilities in OPC UA .NET Standard Stack

CVE-2024-42512High
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Original NVD description (English source)

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS