Vulnerability Details CVE-2021-32994
Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2021-32994
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.59.0
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.60.0
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.61.0
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.62.0
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.62.1
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.63.0
-
cpe:2.3:a:softing:opc_ua_c++_software_development_kit:5.64.0