← Voltar para CVEs

CVE-2018-7559

N/A

Descricao

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado6/13/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

opcfoundation:ua-.net-legacyopcfoundation:ua-.netstandard

Fraquezas (CWE)

CWE-320

Referencias

http://www.securityfocus.com/bid/108688(cve@mitre.org)

https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45(cve@mitre.org)

https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150(cve@mitre.org)

https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/108688(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150(af854a3a-2127-422b-91ae-364da2661108)

https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.