{"id":"CVE-2024-42512","title":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.","summary":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cwe":["CWE-208"],"vendor":"opcfoundation","product":"ua_.net_standard_stack","affected":["ua_.net_standard_stack < 1.5.374.158"],"patched":["ua_.net_standard_stack 1.5.374.158"],"published":"2025-02-10","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:18:46.967","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-42512","references":[{"url":"https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-858251.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00599,"epssPercentile":0.47434,"ingestedAt":"2026-10-15T03:30:12.783Z","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2025-02-11T14:49:03.675054Z"},"slug":"CVE-2024-42512","body":"## Overview\n\nVulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.\n\n## Affected\n\n- `ua_.net_standard_stack < 1.5.374.158`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `ua_.net_standard_stack 1.5.374.158`","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}