CVE-2021-42577: Null Pointer Dereference
An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42577?
CVE-2021-42577 is an issue discovered in Softing OPC UA C++ SDK before version 5.70, where a malformed OPC/UA message abort packet can cause the client to crash with a NULL pointer dereference.
What is the severity of CVE-2021-42577?
CVE-2021-42577 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2021-42577?
Softing Datafeed Opc Suite (up to and including version 5.19), Softing Opc Ua C++ Software Development Kit (up to version 5.70.0), and Softing Secure Integration Server (up to and including version 1.22) are affected by CVE-2021-42577.
How does CVE-2021-42577 impact Softing OPC UA C++ SDK?
CVE-2021-42577 can cause the client to crash with a NULL pointer dereference if a malformed OPC/UA message abort packet is encountered.
Is there a fix available for CVE-2021-42577?
Yes, updating to Softing OPC UA C++ SDK version 5.70 or higher will fix the vulnerability.