high7.5
CVE-2021-32994
Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, whi…
Impact
Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softing | Opc Ua C\+\+ Software Development Kit | from 5.59.0 before 5.65.0 |