Vulnerability Details CVE-2021-40871
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2021-40871
-
cpe:2.3:a:softing:datafeed_opc_suite:-
-
cpe:2.3:a:softing:datafeed_opc_suite:5.17
-
-
cpe:2.3:a:softing:opc:4.20.00
-
cpe:2.3:a:softing:opc:4.20.01
-
cpe:2.3:a:softing:opc:4.20.02
-
cpe:2.3:a:softing:opc:4.20.03
-
cpe:2.3:a:softing:opc:4.20.04
-
cpe:2.3:a:softing:opc:4.22.00
-
cpe:2.3:a:softing:opc:4.22.01
-
cpe:2.3:a:softing:opc:4.22.03
-
cpe:2.3:a:softing:opc:4.22.05
-
cpe:2.3:a:softing:opc:4.30.0
-
cpe:2.3:a:softing:opc:4.30.1
-
cpe:2.3:a:softing:opc:4.31.0
-
cpe:2.3:a:softing:opc:4.31.1
-
cpe:2.3:a:softing:opc:4.40.0
-
cpe:2.3:a:softing:opc:4.40.1
-
cpe:2.3:a:softing:opc:4.40.2
-
cpe:2.3:a:softing:opc:4.40.3
-
cpe:2.3:a:softing:opc:4.41.0
-
cpe:2.3:a:softing:opc:4.41.1
-
cpe:2.3:a:softing:opc:4.41.2
-
cpe:2.3:a:softing:opc:4.45.0
-
cpe:2.3:a:softing:opc:4.46.0
-
cpe:2.3:a:softing:opc:4.47.0
-
cpe:2.3:a:softing:opc:4.47.1
-
cpe:2.3:a:softing:opc:5.2
-
cpe:2.3:a:softing:opc:5.30
-
cpe:2.3:a:softing:opc:5.65
-
cpe:2.3:a:softing:secure_integration_server:-
-
cpe:2.3:a:softing:secure_integration_server:1.22
-
cpe:2.3:a:softing:th_scope:3.5