Softing: >> Opc Ua C++ Software Development Kit >> 5.62.1 Security Vulnerabilities
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-12-14
An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-10-20
Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-04
An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.
CVSS Score
6.5
EPSS Score
0.004
Published
2022-03-11
An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-03-11