{"id":"EUVD-2025-5035","revision":"b1b8978c50954199858edddd1f2cb73e","records":[{"revision":"b1b8978c50954199858edddd1f2cb73e","observedAt":"2026-11-07T00:29:54.496+00:00","statement":{"source":"euvd","id":"EUVD-2025-5035","aliases":["CVE-2024-42512","GHSA-h958-fxgg-g7w3","GHSA-qv5f-57gw-vx3h"],"title":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.","description":"Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","score":8.6,"severity":null}],"references":["https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5035","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Feb 10, 2025, 12:00:00 AM","dateUpdated":"Oct 15, 2026, 12:48:21 AM"},"relatedAdvisories":[{"id":"NCSC-2025-0077","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2024-1305","CVE-2024-4877","CVE-2024-5594","CVE-2024-24974","CVE-2024-27459","CVE-2024-27903","CVE-2024-28882","CVE-2024-41046","CVE-2024-41049","CVE-2024-41055","CVE-2024-42154","CVE-2024-42161","CVE-2024-42512","CVE-2024-42513","CVE-2024-52285","CVE-2024-56181","CVE-2024-56182","CVE-2024-56336","CVE-2025-23384","CVE-2025-23396","CVE-2025-23397","CVE-2025-23398","CVE-2025-23399","CVE-2025-23400","CVE-2025-23401","CVE-2025-23402","CVE-2025-25266","CVE-2025-25267","CVE-2025-27392","CVE-2025-27393","CVE-2025-27394","CVE-2025-27395","CVE-2025-27396","CVE-2025-27397","CVE-2025-27398","CVE-2025-27438","CVE-2025-27493","CVE-2025-27494"]},{"id":"SSA-858251","title":"SSA-858251: Authentication Bypass Vulnerabilities in OPC UA","vulnerabilityIds":["CVE-2024-42512","CVE-2024-42513"]},{"id":"ICSA-25-072-09","title":"Siemens OPC UA","vulnerabilityIds":["CVE-2024-42512","CVE-2024-42513"]},{"id":"WID-SEC-W-2025-0298","title":"OPC Foundation OPC UA .NET Standard Stack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","vulnerabilityIds":["CVE-2024-42512","CVE-2024-42513"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-5035","identifiers":["EUVD-2025-5035","CVE-2024-42512","GHSA-h958-fxgg-g7w3","GHSA-qv5f-57gw-vx3h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}