Vulnerabilities > CVE-2022-44018 - NULL Pointer Dereference vulnerability in Softing Uatoolkit Embedded 1.31/1.40

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
softing
CWE-476

Summary

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application.

Vulnerable Configurations

Part Description Count
Application
Softing
3

Common Weakness Enumeration (CWE)