Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ua-.net-legacy | Opcfoundation | 1.03.342 (including) | * |
| Ua-.netstandard | Opcfoundation | 1.4.353.15 (including) | * |