S2OPC CVE-2026-18257

Exploitation requires the attacker to occupy a network-adjacent or on-path position between communicating S2OPC endpoints - passive sniffing alone is insufficient; active traffic interception (MitM) is necessary. Additionally, the attack is only viable when at least one expired root CA certificate is present in the S2OPC trusted certificate store, as the flaw specifically concerns the omission of validity period enforcement on root issuers; if all trusted root CAs hold current validity periods, the exploitable condition does not arise in practice. Affected deployment versions are S2OPC 1.5.0 through 1.x prior to 2.0.0. No authentication by the attacker to the S2OPC instance is required per the CVSS PR:N metric, but the MitM positioning prerequisite materially limits opportunistic exploitation.

The NVD CVSS 3.1 score of 5.6 (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) reflects meaningful but bounded risk. AC:H correctly captures the prerequisite of network positioning for a man-in-the-middle attack, significantly reducing exploitability compared to a direct unauthenticated flaw. No EPSS score was provided in the intelligence feed, so exploitation probability cannot be quantified; no KEV listing and no public POC further reduce urgency. The CIA triple of L/L/L reflects partial impact: an attacker who successfully bypasses certificate validation can intercept or tamper with OPC UA session data but cannot fully compromise the host or cause catastrophic data destruction in isolation. However, in operational technology (OT) and ICS environments where S2OPC is typically deployed, even low-integrity tampering of industrial protocol messages can have outsized safety or process consequences disproportionate to the raw CVSS score. Risk should be elevated in environments where S2OPC handles safety-instrumented systems or process control. There is no conflict between the CVSS vector and the vulnerability description.

An attacker with network access between an S2OPC client and server - for example via ARP poisoning, rogue access point, or compromised network switch on an OT segment - presents a TLS certificate signed by an expired root CA that the legitimate S2OPC peer has in its trust store. Because S2OPC's CycloneCrypto wrapper skips the validity period check on the root issuer, the certificate is accepted as trusted, enabling the attacker to establish a trusted OPC UA session and intercept or inject industrial protocol messages. No public proof-of-concept has been identified, but the logic flaw is straightforward to exploit once MitM positioning is achieved.