CVE-2024-42513

EUVD-2025-5034
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 46.3%
Affected Products (NVD)
VendorProductVersion
opcfoundationua_.net_standard_stack
𝑥
< 1.5.374.158
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensIndustrial Edge for Machine Tools \(formerly known as \"SINUMERIK Edge\"\)
𝑥
< *
ADP
SiemensSIMATIC BRAUMAT
𝑥
< *
ADP
SiemensSIMATIC Energy Manager PRO V7.2
𝑥
< *
ADP
SiemensSIMATIC Energy Manager PRO V7.3
𝑥
< *
ADP
SiemensSIMATIC Energy Manager PRO V7.4
V7.4 Update 0 ≤
𝑥
< V7.4 Update 7
ADP
SiemensSIMATIC Energy Manager PRO V7.5
V7.5 Update 0 ≤
𝑥
< V7.5 Update 2
ADP
SiemensSIMATIC IPC DiagMonitor
𝑥
< *
ADP
SiemensSIMATIC SISTAR
𝑥
< *
ADP
SiemensSIMATIC WinCC Unified V18
𝑥
< V18 Update 6
ADP
SiemensSIMATIC WinCC Unified V19
𝑥
< V19 Update 4
ADP
SiemensSIMATIC WinCC V8.0
𝑥
< V8.0 Update 3
ADP