medium6.5
CVE-2021-45117
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases.
Impact
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opcfoundation | Ua-Nodeset | before 1.05.01 |
| Siemens | Simatic Net Pc | Versions 14, 15, 16, 17 |
| Siemens | Sitop Manager | All versions |
| Siemens | Telecontrol Server Basic | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf
- https://www.youtube.com/watch?v=qv-RBdCaV4k
- https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf
- https://www.youtube.com/watch?v=qv-RBdCaV4k