Vulnerability Details CVE-2021-40142
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf
- https://opcfoundation.org/security-bulletins/
- https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf
- https://opcfoundation.org/security-bulletins/
Products affected by CVE-2021-40142
-
cpe:2.3:a:opcfoundation:local_discover_server:*
-
cpe:2.3:a:siemens:simatic_net_pc:14
-
cpe:2.3:a:siemens:simatic_net_pc:15
-
cpe:2.3:a:siemens:simatic_net_pc:16
-
cpe:2.3:a:siemens:simatic_net_pc:17
-
cpe:2.3:a:siemens:simatic_wincc:-
-
cpe:2.3:a:siemens:simatic_wincc_runtime:-
-
cpe:2.3:a:siemens:simatic_wincc_unified_scada_runtime:-
-
cpe:2.3:a:siemens:telecontrol_server_basic:3.0
-
cpe:2.3:h:siemens:simatic_process_historian_opc_ua_server:-
-
cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:2019
-
cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:2022