Vulnerabilities > CVE-2021-42577 - NULL Pointer Dereference vulnerability in Softing products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
softing
CWE-476
NVD
Published: 2022-03-11
Updated: 2022-03-18

Summary

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

Vulnerable Configurations

Part Description Count
Application
Softing
44

Common Weakness Enumeration (CWE)

References