Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-7390

Bypass the client certificate trust check of an opc.https server while only secure communication is allowed

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Softing

Description

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softing OPC UA C++ SDK

Default version status: unaffected

  • 6.40 to ≤ 6.80affected
  • 6.80.1unaffected

Softing edgeConnector

Default version status: affected

  • 0 to ≤ 2025.03affected
  • SDEX Suite V1.0unaffected

Softing edgeAggregator

Default version status: affected

  • 0 to ≤ 2025.03affected
  • SDEX Suite V1.0unaffected

References