medium5.1
CVE-2024-25075
An issue was discovered in Softing uaToolkit Embedded before 1.41.1.
Impact
An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softing | Softing UaToolkit Embedded | before 1.41.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.