Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
| Software | From | Fixed in |
|---|---|---|
| opcfoundation / ua-.netstandard | 1.4.353.15 | 1.4.353.15.x |
| opcfoundation / ua-.net-legacy | 1.03.342 | 1.03.342.x |
OPCFoundation.NetStandard.Opc.Ua
|
- | 1.4.353.15 |