← Back to CVEs

CVE-2018-7559

N/A

Description

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.

CVE Details

CVSS v3.1 ScoreN/A

Published6/13/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

opcfoundation:ua-.net-legacyopcfoundation:ua-.netstandard

Weaknesses (CWE)

CWE-320

References

http://www.securityfocus.com/bid/108688(cve@mitre.org)

https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45(cve@mitre.org)

https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150(cve@mitre.org)

https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/108688(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150(af854a3a-2127-422b-91ae-364da2661108)

https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.