Description
Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | OPCFoundation.NetStandard.Opc.Ua | < 1.4.353.15 | 1.4.353.15 | GHSA-8336-mxp6-v5h9 |