{"action":"Upgrade OPCFoundation.NetStandard.Opc.Ua to 1.3.352.12 or later.","affected":[{"fixed":"1.3.352.12","introduced":"0"}],"component":"OPCFoundation.NetStandard.Opc.Ua","cve_ids":["CVE-2018-7559"],"ecosystem":"NuGet","epss":0.01149,"exploited":false,"fixed_versions":["1.3.352.12"],"ghsa_id":"GHSA-gr4c-5rq6-cgh3","id":"tcs_01M5N8PKN042NFTDGQER0VF66C","modified_at":"2024-12-02T05:42:29.771247Z","published_at":"2018-10-16T19:58:42Z","references":["https://osv.dev/vulnerability/GHSA-gr4c-5rq6-cgh3","https://nvd.nist.gov/vuln/detail/CVE-2018-7559","https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45","https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150","https://github.com/OPCFoundation/UA-.NETStandard","https://github.com/advisories/GHSA-gr4c-5rq6-cgh3","https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf","http://www.securityfocus.com/bid/108688"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-gr4c-5rq6-cgh3","url":"https://osv.dev/vulnerability/GHSA-gr4c-5rq6-cgh3"}],"summary":"OPC UA applications can allow a remote attacker to determine a Server's private key"}