Lucene search

[email protected]CVE-2021-42262

HistoryMar 11, 2022 - 11:15 p.m.

CVE-2021-42262

2022-03-1123:15:09

CWE-119

[email protected]

web.nvd.nist.gov

cve-2021-42262

softing

opc ua

sdk

out-of-memory

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

Affected configurations

NVD

Node

softingdatafeed_opc_suiteRange≤5.19

softingopc_ua_c\+\+_software_development_kitRange5.56.0–5.70.0

softingsecure_integration_serverRange≤1.22

CPENameOperatorVersion
softing:datafeed_opc_suitesofting datafeed opc suitele5.19
softing:opc_ua_c\+\+_software_development_kitsofting opc ua c++ software development kitlt5.70.0
softing:secure_integration_serversofting secure integration serverle1.22

CPE	Name	Operator	Version
softing:datafeed_opc_suite	softing datafeed opc suite	le	5.19
softing:opc_ua_c\+\+_software_development_kit	softing opc ua c++ software development kit	lt	5.70.0
softing:secure_integration_server	softing secure integration server	le	1.22

References

industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf

industrial.softing.com/us/solutions/opc-and-opc-ua.html

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

Related for CVE-2021-42262

cvelist1 nvd1 prion1