# Duplicate Advisory: Authorization Bypass in OPC UA .NET Standard Stack

Source: https://junglewise.ai/threats/duplicate-advisory-authorization-bypass-in-opc-ua-net-standard-stack-965ddb2c  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-02-10  
License: CC BY 4.0 with a link back

Severity: low · CVSS 3.1 · Published 2025-02-10

Duplicate Advisory: Authorization Bypass in OPC UA .NET Standard Stack

Technologies: [OPCFoundation.NetStandard.Opc.Ua (NuGet)](https://junglewise.ai/threats/technologies/opcfoundation-netstandard-opc-ua). Vendors: [NuGet](https://junglewise.ai/threats/vendors/nuget).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Low severity, with a CVSS score of 3.1, published 10 February 2025.

**Which products and versions are affected?** OPCFoundation.NetStandard.Opc.Ua (NuGet) ECOSYSTEM:introduced=0,fixed=1.5.374.158.

**Is there a fix for This vulnerability?** Yes. OPCFoundation.NetStandard.Opc.Ua (NuGet): upgrade to 1.5.374.158 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected?** Check whether you run OPCFoundation.NetStandard.Opc.Ua (NuGet) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- OPCFoundation.NetStandard.Opc.Ua (NuGet): upgrade to 1.5.374.158 or later

  ```sh
  dotnet add package OPCFoundation.NetStandard.Opc.Ua --version 1.5.374.158
  ```


## Affected products

- OPCFoundation.NetStandard.Opc.Ua (NuGet) ECOSYSTEM:introduced=0,fixed=1.5.374.158

## Related threats

- [Duplicate Advisory: Authentication Bypass by Spoofing in OPC UA .NET Standard Stack](https://junglewise.ai/threats/duplicate-advisory-authentication-bypass-by-spoofing-in-opc-ua-net-ddfa6525)
- [Security Update for the OPC UA .NET Standard Stack](https://junglewise.ai/threats/cve-2024-45526-security-update-for-the-opc-ua-net-standard-stack)
- [Security Update for the OPC UA .NET Standard Stack](https://junglewise.ai/threats/security-update-for-the-opc-ua-net-standard-stack-2bb6ae26)
- [Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard](https://junglewise.ai/threats/cve-2020-8867-insufficient-session-expiration-and-toctou-race-condition-in-opc)
- [OPC UA applications can allow a remote attacker to determine a Server's private key](https://junglewise.ai/threats/cve-2018-7559-opc-ua-applications-can-allow-a-remote-attacker-to-determine-a)