high7.5
CVE-2021-40142
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages …
Impact
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opcfoundation | Local Discover Server | before 1.04.402.463 |
| Siemens | Simatic Process Historian Opc Ua Server Firmware | before 2022 Version 2022 |
| Siemens | Simatic Net Pc | Versions 14, 15, 16, 17 |
| Siemens | Simatic Wincc | All versions |
| Siemens | Simatic Wincc Runtime | All versions |
| Siemens | Simatic Wincc Unified Scada Runtime | All versions |
| Siemens | Telecontrol Server Basic | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf
- https://opcfoundation.org/security-bulletins/
- https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf
- https://opcfoundation.org/security-bulletins/