{"id":"CVE-2024-42513","title":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.","summary":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-305"],"vendor":"opcfoundation","product":"ua_.net_standard_stack","affected":["ua_.net_standard_stack < 1.5.374.158"],"patched":["ua_.net_standard_stack 1.5.374.158"],"published":"2025-02-10","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:18:47.157","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-42513","references":[{"url":"https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-858251.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00577,"epssPercentile":0.46222,"ingestedAt":"2026-10-15T03:30:12.783Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-02-10T20:38:31.202098Z"},"slug":"CVE-2024-42513","body":"## Overview\n\nVulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.\n\n## Affected\n\n- `ua_.net_standard_stack < 1.5.374.158`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `ua_.net_standard_stack 1.5.374.158`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}