CVE-2024-45526

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Oct 22, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-455276.1REDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSRF via index.php?logoCVE-2024-455285.4CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS.CVE-2024-45535.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_memberCVE-2024-455376.5Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted usCVE-2024-455389.6Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-728CVE-2024-455397.5Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology CVE-2024-45545.4Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects AcceCVE-2024-455406.6Memory corruption while invoking IOCTL map buffer request from userspace.CVE-2024-455417.8Memory corruption when IOCTL call is invoked from user-space to read board data.CVE-2024-455427.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2024-455436.6Memory corruption while accessing MSM channel map and mixer functions.CVE-2024-455446.6Memory corruption while processing IOCTL calls to add route entry in the HW.
CVE-2024-45526: Medium severity, CVSS 5.3 | Vulnix