Skip to content
Sign in
6.5 Medium

CVE-2023-26150 Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to…

Description

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an active session.

Affected products and versions

Product Affected versions Fixed in
asyncua 0.9 earliest → < 0.9.96 0.9.96

Other CVEs of asyncua

The 3 CVEs of asyncua →
CVE-2023-26151 Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a… 5.3 Medium CVE-2022-25304 All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a… 7.5 High
Track this CVE