Siemens Industrial Products with OPC UA

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC NET PC, SITOP Manager, TeleControl Server Basic Vulnerability: Null Pointer Dereference 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory...

CVE-2021-45117

CVE-2021-45117 concerns the OPC UA ANSI C stack stubs in the NodeSets. The root cause is a NULL pointer dereference caused by not handling all error cases in generated code, potentially crashing an OPC UA client (and possibly a server in certain usage). The vulnerability is reported with a CVSSv3...