CVE-2018-7559

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.

• CWE-320

• http://www.securityfocus.com/bid/108688
• https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45Patch, Third Party Advisory
• https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150Patch, Third Party Advisory
• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdfThird Party Advisory
• http://www.securityfocus.com/bid/108688
• https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45Patch, Third Party Advisory
• https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150Patch, Third Party Advisory
• https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdfThird Party Advisory

Published

Jun 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7551There is an invalid free in MiniPS::delete0 in minips.cpp th…
• CVE-2018-7552There is an invalid free in Mapping::DoubleHash::clear in ma…
• CVE-2018-7553There is a heap-based buffer overflow in the pcxLoadRaster f…
• CVE-2018-7554There is an invalid free in ReadImage in input-bmp.ci that l…
• CVE-2018-7556LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x…
• CVE-2018-7557The decode_init function in libavcodec/utvideodec.c in FFmpe…6.5
• CVE-2018-7560index.js in the Anton Myshenin aws-lambda-multipart-parser N…7.5
• CVE-2018-7561Stack-based Buffer Overflow in httpd on Tenda AC9 devices V1…
• CVE-2018-7562A remote code execution issue was discovered in GLPI through…
• CVE-2018-7563An issue was discovered in GLPI through 9.2.1. The applicati…
• CVE-2018-7564Stored XSS exists on Polycom QDX 6000 devices.
• CVE-2018-7565CSRF exists on Polycom QDX 6000 devices.