Vulnerabilities > CVE-2021-40872 - Type Confusion vulnerability in Softing Smartlink Hw-Dp and Uatoolkit Embedded
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassing security checks) by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of an invalid type cast, and must be restarted.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |