medium6.5
CVE-2021-42262
An issue was discovered in Softing OPC UA C++ SDK before 5.70.
Impact
An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softing | Datafeed Opc Suite | through 5.19 |
| Softing | Opc Ua C\+\+ Software Development Kit | from 5.56.0 before 5.70.0 |
| Softing | Secure Integration Server | through 1.22 |
Weakness classification
References
- NVD record
- CVE.org record
- https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
- https://industrial.softing.com/us/solutions/opc-and-opc-ua.html
- https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
- https://industrial.softing.com/us/solutions/opc-and-opc-ua.html