CVE-2021-40142

In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-08-27

Last modified

2024-08-04

Weaknesses

CWE-119

Affected products

• Local Discover Server (Opcfoundation)
• Simatic Net Pc (Siemens)
• Simatic Process Historian Opc Ua Server Firmware (Siemens)
• Simatic Wincc (Siemens)
• Simatic Wincc Runtime (Siemens)
• Simatic Wincc Unified Scada Runtime (Siemens)
• Telecontrol Server Basic (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf
• https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf
• https://opcfoundation.org/security-bulletins/