Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/OPCFoundation.NetStandard.Opc.Ua@1.3.342
purl pkg:nuget/OPCFoundation.NetStandard.Opc.Ua@1.3.342
Tags Ghost
Next non-vulnerable version 1.5.374.118
Latest non-vulnerable version 1.5.374.158
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-2bp3-w8u8-7fe4
Aliases:
CVE-2018-12087
GHSA-8336-mxp6-v5h9
Improper Certificate Validation Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
1.4.353.13
Affected by 12 other vulnerabilities.
1.4.353.15
Affected by 11 other vulnerabilities.
VCID-644h-mdcn-1qau
Aliases:
CVE-2018-12585
An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.
1.3.348
Affected by 14 other vulnerabilities.
VCID-6nd4-b64f-9kbe
Aliases:
CVE-2018-7559
GHSA-gr4c-5rq6-cgh3
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit . A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.
1.3.352.11
Affected by 14 other vulnerabilities.
1.3.352.12
Affected by 13 other vulnerabilities.
VCID-e415-z3cf-ekfm
Aliases:
CVE-2018-12086
GHSA-782p-53wq-cxmj
Out-of-bounds Write Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
1.4.353.13
Affected by 12 other vulnerabilities.
1.4.353.15
Affected by 11 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.