CVE-2021-40873

HIGH

Softing Industrial Automation OPC UA C++ SDK <5.66 - DoS

Title source: llm

Description

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0063
EPSS Percentile 69.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-415
Status published

Affected Products (7)

softing/datafeed_opc_suite < 5.18
softing/edgeconnector < 2.31
softing/opc < 5.66
softing/secure_integration_server < 1.22
softing/th_scope
softing/uagates < 1.73
softing/uatoolkit_embedded < 1.40

Timeline

Published Nov 10, 2021
Tracked Since Feb 18, 2026