GHSA-8336-mxp6-v5h9

Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-12087

Packages

Ecosystem	Package	Affected	Fixed in
NuGet	OPCFoundation.NetStandard.Opc.Ua	< 1.4.353.15	1.4.353.15

Details

As written in the advisory (Markdown source, shown as plain text).

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-12087 advisory
https://github.com/advisories/GHSA-8336-mxp6-v5h9 advisory
https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12087.pdf web