CVE-2025-1468

Summary

CVE-2025-1468 is a cybersecurity vulnerability affecting CODESYS OPC UA Server. This issue permits unauthenticated remote attackers to obtain sensitive information, including authentication details, when the server utilizes the non-default Basic128Rsa15 security policy. This vulnerability poses a significant risk as it bypasses the standard authentication process, increasing the exposure of affected systems to data breaches and unauthorized access. It is crucial for organizations using CODESYS OPC UA Server with this security policy to apply the necessary patches or updates to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.