CVE-2018-12087 - Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords

Back Back to CVE browser

MEDIUM

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords

Published Oct 3, 2018

5.3

MEDIUM

CVSS 3.0

EPSS 0.29%

Description

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0542
Advisory
https://github.com/advisories/GHSA-8336-mxp6-v5h9
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-12087
https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12087.pdf
x_refsource_CONFIRMMitigationVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0542		Advisory
https://github.com/advisories/GHSA-8336-mxp6-v5h9		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-12087
https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12087.pdf		x_refsource_CONFIRMMitigationVendor Advisory