CVE-2018-7559

Description

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Servers private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.265

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-7559 are fixed in Nuget-OPCFoundation.NetStandard.Opc.Ua 1.3.352.12	Windows
Vulnerabilities CVE-2018-7559 are fixed in Nuget-OPCFoundation.NetStandard.Opc.Ua for Linux 1.3.352.12	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234