CVE-2021-45117: Null Pointer Dereference
First published: Mon Mar 21 2022(Updated: )
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opcfoundation Ua-nodeset | <1.05.01 | |
| Siemens Simatic Net Pc | =14 | |
| Siemens Simatic Net Pc | =15 | |
| Siemens Simatic Net Pc | =16 | |
| Siemens Simatic Net Pc | =17 | |
| Siemens Sitop Manager | ||
| Siemens Telecontrol Server Basic | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-45117.
What is the severity of CVE-2021-45117?
The severity of CVE-2021-45117 is medium with a CVSS score of 6.5.
Which software is affected by CVE-2021-45117?
The software affected by CVE-2021-45117 includes Opcfoundation Ua-nodeset, Siemens Simatic Net Pc (versions 14, 15, 16, and 17), Siemens Sitop Manager, and Siemens Telecontrol Server Basic (version 3.0).
How can the vulnerability in OPC autogenerated ANSI C stack stubs be exploited?
The vulnerability in OPC autogenerated ANSI C stack stubs can be exploited by triggering an error case that leads to a NULL pointer dereference.
Are there any references available for CVE-2021-45117?
Yes, there are references available for CVE-2021-45117. You can find them at the following links: [link1](https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf), [link2](https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf), [link3](https://www.youtube.com/watch?v=qv-RBdCaV4k).
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/event
- agent/tags
- agent/type
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/opcfoundation
- canonical/opcfoundation ua-nodeset
- vendor/siemens
- canonical/siemens simatic net pc
- version/siemens simatic net pc/14
- version/siemens simatic net pc/15
- version/siemens simatic net pc/16
- version/siemens simatic net pc/17
- canonical/siemens sitop manager
- canonical/siemens telecontrol server basic
- version/siemens telecontrol server basic/3.0