CVE-2024-42513

Fixed upstream EPSS <1%CVSS 5.3

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Published 2025-02-10 · CVE record · OSV

Products: Siemens Industrial Edge for Machine Tools (formerly known as "SINUMERIK Edge"), Siemens SIMATIC BRAUMAT, Siemens SIMATIC Energy Manager PRO V7.2, Siemens SIMATIC Energy Manager PRO V7.3, Siemens SIMATIC Energy Manager PRO V7.4, Siemens SIMATIC Energy Manager PRO V7.5, Siemens SIMATIC IPC DiagMonitor, Siemens SIMATIC SISTAR, Siemens SIMATIC WinCC Unified V18, Siemens SIMATIC WinCC Unified V19, Siemens SIMATIC WinCC V8.0

Fixed upstream