GHSA-7wwr-h8cm-9jf7

Suggest an improvement
Source
https://github.com/advisories/GHSA-7wwr-h8cm-9jf7
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-7wwr-h8cm-9jf7/GHSA-7wwr-h8cm-9jf7.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7wwr-h8cm-9jf7
Withdrawn
2025-03-03T20:08:30Z
Published
2025-02-10T21:31:37Z
Modified
2025-03-03T20:26:53Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Duplicate Advisory: Authentication Bypass by Spoofing in OPC UA .NET Standard Stack
Details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-4rcc-7pg7-f57f. This link is maintained to preserve external references.

Original Description

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Database specific 
{
    "cwe_ids":  [
        "CWE-290",
        "CWE-305"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-02-10T22:57:35Z",
    "nvd_published_at":  "2025-02-10T19:15:38Z",
    "severity":  "MODERATE"
}
References

Affected packages

NuGet / OPCFoundation.NetStandard.Opc.Ua

Package

Name
OPCFoundation.NetStandard.Opc.Ua
View open source insights on deps.dev
Purl
pkg:nuget/OPCFoundation.NetStandard.Opc.Ua

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.374.158

Affected versions

0.*
0.4.0
0.4.1
0.4.3
0.4.4
0.4.5
1.*
1.3.348
1.3.349
1.3.350
1.3.350.1
1.3.350.3
1.3.350.4
1.3.350.5
1.3.350.6
1.3.351.7
1.3.352.9
1.3.352.10
1.3.352.11
1.3.352.12
1.4.353.13
1.4.353.14
1.4.353.15
1.4.354.16-preview
1.4.354.18-preview
1.4.354.19-preview
1.4.354.20-preview
1.4.354.21
1.4.354.23
1.4.355.24-preview
1.4.355.25
1.4.355.26
1.4.356.27
1.4.357.28
1.4.358.29-preview
1.4.358.30
1.4.359.31
1.4.360.33
1.4.360.34
1.4.361.38
1.4.361.39
1.4.362.40-preview
1.4.362.41-preview
1.4.362.42
1.4.363.47-preview
1.4.363.48-preview
1.4.363.49
1.4.363.104-preview
1.4.363.107
1.4.364.40
1.4.365.1-preview
1.4.365.2
1.4.365.10
1.4.365.23
1.4.365.48
1.4.366.31-preview
1.4.366.38
1.4.367.39
1.4.367.41
1.4.367.42
1.4.367.64-preview
1.4.367.75
1.4.367.95
1.4.367.100
1.4.368.27-preview
1.4.368.33
1.4.368.52-preview
1.4.368.53
1.4.368.58
1.4.369.30
1.4.370.1
1.4.370.9
1.4.370.12
1.4.371.41
1.4.371.50
1.4.371.60
1.4.371.86
1.4.371.91
1.4.371.96
1.4.372.38-preview
1.4.372.46-preview
1.4.372.56
1.4.372.67-preview
1.4.372.76
1.4.372.91-preview
1.4.372.106
1.4.372.107
1.4.372.112-preview
1.4.372.116-preview
1.5.368.2-rc0
1.5.368.3-rc0
1.5.368.5-beta
1.5.371.3-beta
1.5.372.1-rc
1.5.372.110-rc2
1.5.372.113
1.5.373.3-preview
1.5.373.121
1.5.374.26-preview
1.5.374.27
1.5.374.33-preview
1.5.374.36
1.5.374.50-preview
1.5.374.54
1.5.374.61-preview
1.5.374.70
1.5.374.78
1.5.374.118
1.5.374.124
1.5.374.126

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-7wwr-h8cm-9jf7/GHSA-7wwr-h8cm-9jf7.json"