Findings

CVE-2024-42512

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa…

Published Feb 10, 2025 · updated Oct 15, 2026 · opcfoundation ua .net standard stack

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 10, 2025 · NIST NVD

    Detected

    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

  2. Oct 15, 2026 · NIST NVD

    Updated

    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Affected

  • cpe opcfoundation/ua .net standard stackversion unspecified

Sources

  • CVE.orgCVE-2024-42512

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2024-42512

    Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

    nvd.nist.gov

References