CVE-2018-12087

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published: Oct 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-120887.5S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present o CVE-2018-120897.5In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Serv CVE-2018-120906.1There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaSc CVE-2018-120929.8tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.CVE-2018-120937.5tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.CVE-2018-120945.4Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or CVE-2018-120955.4A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in th CVE-2018-120965.5The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause a CVE-2018-120975.5The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to CVE-2018-120985.5The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disc CVE-2018-120996.1Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.CVE-2018-121004.8Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI.