CVE-2021-42577

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-03-11

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Datafeed Opc Suite (Softing)
• Opc Ua C++ Software Development Kit (Softing)
• Secure Integration Server (Softing)

References

• https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42577.pdf
• https://softing.com