Summary
Successful exploitation of these vulnerabilities could crash the device being accessed. A buffer-overflow condition may also allow remote code execution.
Vulnerabilities 2
-
Critical 9.8
Softing Industrial Automation OPC
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
-
High 7.5
Softing Industrial Automation OPC
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition.
Revision history
-
#1
ICSA-20-210-02 Softing Industrial Automation OPC
References
-
ICS Advisory ICSA-20-210-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-210-02
-
Recommended Practices
https://data-intelligence.softing.com/products/datafeed-opc-sdks/datafeed-opc-classic-da-ae-client-server-sdk-for-windows/#tx-dftabs-tabContent2
-
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B