Patchfirst
ChainNuGet:OPCFoundation.NetStandard.Opc.Ua.Core

OPCFoundation.NetStandard.Opc.Ua.Core: successive fixes (2024)

3 CVEs over 2 generations, 5 Jul 2024 to 10 Feb 2025.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2024-338625 Jul 2024 First in the chain
  2. CVE-2024-4552622 Oct 2024 next fix after CVE-2024-33862
  3. CVE-2024-4251210 Feb 2025 related to CVE-2024-33862next fix after CVE-2024-45526
Jul 2024OctDecFeb 2025 CVE-2024-33862 → CVE-2024-42512: related (medium confidence)CVE-2024-33862 → CVE-2024-45526: Next fix in the same package (medium confidence)CVE-2024-45526 → CVE-2024-42512: Next fix in the same package (low confidence) CVE-2024-33862 5 Jul 2024 CVE-2024-45526 22 Oct 2024 CVE-2024-42512 10 Feb 2025 Jul 2024AugSepOctNovDecJan 2025Feb CVE-2024-33862 → CVE-2024-42512: related (medium confidence)CVE-2024-33862 → CVE-2024-45526: Next fix in the same package (medium confidence)CVE-2024-45526 → CVE-2024-42512: Next fix in the same package (low confidence) CVE-2024-33862 5 Jul 2024 CVE-2024-45526 22 Oct 2024 CVE-2024-42512 10 Feb 2025
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2024-33862 5 Jul 2024 A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could… · fixed in 1.5.374.54 First in chain 14.5
CVE-2024-45526 22 Oct 2024 An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78 · fixed in 1.5.374.118 CVE-2024-33862 · Next fix in the same package · Medium 12.3
CVE-2024-42512 10 Feb 2025 Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass… · fixed in 1.5.374.158 CVE-2024-33862 · related · Medium 15.8
↑ ↓ chooseEnter openEsc close