NetSight
medium5.3

CVE-2018-12087

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network …

Impact

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

Affected products

VendorProductAffected versions
OpcfoundationUa-.Net-Legacy
from 1.03.342
OpcfoundationUa-.Netstandard
from 1.4.353.15

Weakness classification

References