Vulnerabilities > CVE-2025-1468

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
CWE-203
NVD
Published: 2025-03-18
Updated: 2025-03-18

Summary

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.

Common Weakness Enumeration (CWE)

References