What’s Vulnerable › Vulnerabilities
CVE-2020-29457
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-02-16 · updated 2026-06-17
- Weakness: CWE-295
Description
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection.
Affected products
- Opcfoundation Ua-.Netstandard: before 1.4.365.10 — fixed in 1.4.365.10
How to fix
Upgrade to a fixed version: Opcfoundation Ua-.Netstandard 1.4.365.10. Check the vendor advisory for mitigations.
References
- https://github.com/OPCFoundation/UA-.NETStandard
- https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-29457.pdf
- https://www.nuget.org/packages/OPCFoundation.NetStandard.Opc.Ua/
- https://github.com/OPCFoundation/UA-.NETStandard
- https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2020-29457.pdf
- https://www.nuget.org/packages/OPCFoundation.NetStandard.Opc.Ua/
Get alerted when CVE-2020-29457 or the next vulnerability affects your stack