Description
A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Softing | OPC UA C++ SDK | 6.40 – ≤ 6.80 | 6.80.1 |
| Softing | edgeConnector | ≤ 2025.03 | SDEX Suite V1.0 |
| Softing | edgeAggregator | ≤ 2025.03 | SDEX Suite V1.0 |