CVE-2024-42512
Fixed upstream EPSS <1%CVSS 8.6
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.
Products: Siemens SIMATIC Energy Manager PRO V7.2, Siemens SIMATIC Energy Manager PRO V7.3, Siemens SIMATIC Energy Manager PRO V7.4, Siemens SIMATIC Energy Manager PRO V7.5, Siemens SIMIT V11
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | OPCFoundation.NetStandard.Opc.Ua.Core | 1.5.374.158 |