Description
An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | OPCFoundation.NetStandard.Opc.Ua | < 1.5.374.118 | 1.5.374.118 | GHSA-7vfh-cqpc-4267 |
| NuGet | OPCFoundation.NetStandard.Opc.Ua.Core | < 1.5.374.118 | 1.5.374.118 | GHSA-7vfh-cqpc-4267 |
Advisories 1
- WID-SEC-2024-3239 OPC UA .NET Standard Stack: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 28, 2024