Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-42512

Fixed upstream EPSS <1%CVSS 8.6

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Published 2025-02-10 · CVE record · OSV

Products: Siemens SIMATIC Energy Manager PRO V7.2, Siemens SIMATIC Energy Manager PRO V7.3, Siemens SIMATIC Energy Manager PRO V7.4, Siemens SIMATIC Energy Manager PRO V7.5, Siemens SIMIT V11

Fixed upstream

EcosystemPackageFixed in
NuGetOPCFoundation.NetStandard.Opc.Ua.Core1.5.374.158