CVE-2025-7390 — Bypass the client certificate trust check of an opc.https server while only secure communication is allowed

CVE-2025-7390

Bypass the client certificate trust check of an opc.https server while only secure communication is allowed PUBLISHED

Description (CNA)

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.

Affected (CNA)

Vendor / product	Versions
Softing / OPC UA C++ SDK	affected 6.40 through 6.80; unaffected 6.80.1
Softing / edgeConnector	affected 0 through 2025.03; unaffected SDEX Suite V1.0
Softing / edgeAggregator	affected 0 through 2025.03; unaffected SDEX Suite V1.0

CWE

CWE-295

References

https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-7390.html
https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-7390.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.