CVE-2021-40873

Published: Nov 10, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.

Affected (7)

Products: Softing: Datafeed Opc Suite, Edgeconnector, Opc, Secure Integration Server, Th Scope, Uagates, Uatoolkit Embedded

7 products

Secure Integration Server

Th Scope

Uagates

Uatoolkit Embedded

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Softing Datafeed Opc Suite	Before 5.18
Softing Edgeconnector	Up to 2.31
Softing Opc	Before 5.66
Softing Secure Integration Server	Up to 1.22
Softing Th Scope	From 3.5
Softing Uagates	Before 1.73
Softing Uatoolkit Embedded	Before 1.40