Description
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | OPCFoundation.NetStandard.Opc.Ua.Core | < 1.5.374.158 | 1.5.374.158 | GHSA-h958-fxgg-g7w3 |
Advisories 4
- SSA-858251 SSA-858251: Authentication Bypass Vulnerabilities in OPC UA Siemens ProductCERT · Oct 13, 2026
- ICSA-25-072-09 Siemens OPC UA CISA ICS & IT advisories · Jan 14, 2026
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- WID-SEC-2025-0298 OPC Foundation OPC UA .NET Standard Stack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Mar 10, 2025