GitHub Advisoryadvisory · NuGet

GHSA-mjww-934m-h4jw Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core

MEDIUM Published 2021-11-19 Modified 2022-09-01 Official page ↗
Aliases
CVE-2020-29457
Ecosystem
NuGet
Packages
OPCFoundation.NetStandard.Opc.Ua.Core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-295
Reviewed
2021-05-07

Affected packages

• NuGet OPCFoundation.NetStandard.Opc.Ua.Core: < 1.4.365.10 → fixed in 1.4.365.10

Description

A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 allows attackers to establish a connection using invalid certificates.

Related

Alias · CVE (1)

  • CVE-2020-29457 A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure… vulnerability

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References