Skip to content
OpenAdvisories
High ICSA-21-168-02 1 CVE

Softing OPC-UA C++ SDK

Published Jun 17, 2021 · Updated Jun 17, 2021

Vendor: Softing Product: OPC UA C++ SDK (Software Development Kit)

Summary

A remote attacker may be able to crash the device, resulting in a denial-of-service condition. This vulnerability existsin exported functions of the library, and exploits may have different consequences depending on how the library functions have been used.

Vulnerabilities 1

  • High 7.5
    CVE-2021-32994

    Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

    Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to …

    Softing OPC UA C++ SDK (Software Development Kit)

Revision history

  1. #1

    ICSA-21-168-02 Softing OPC-UA C++ SDK

References