Vulnerabilities > CVE-2023-41151 - Improper Handling of Exceptional Conditions vulnerability in Softing OPC and OPC UA C++ Software Development KIT

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

softing

CWE-755

NVD

Published: 2023-12-14

Updated: 2024-11-21

Summary

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.

Vulnerable Configurations

Part	Description	Count
Application	Softing Softing OPC - Softing OPC 4.20.00 Softing OPC 4.20.01 Softing OPC 4.20.02 Softing OPC 4.20.03 Softing OPC 4.20.04 Softing OPC 4.22.00 Softing OPC 4.22.01 Softing OPC 4.22.03 Softing OPC 4.22.05 Softing OPC 4.30.0 Softing OPC 4.30.1 Softing OPC 4.31.0 Softing OPC 4.31.1 Softing OPC 4.40.0 Softing OPC 4.40.1 Softing OPC 4.40.2 Softing OPC 4.40.3 Softing OPC 4.41.0 Softing OPC 4.41.1 Softing OPC 4.41.2 Softing OPC 4.45.0 Softing OPC 4.46.0 Softing OPC 4.47.0 Softing OPC 4.47.1 Softing OPC 5.2 Softing OPC 5.30 Softing OPC UA C++ Software Development KIT 5.00.04 Softing OPC UA C++ Software Development KIT 5.10.00 Softing OPC UA C++ Software Development KIT 5.10.01.5872 Softing OPC UA C++ Software Development KIT 5.10.01.6067 Softing OPC UA C++ Software Development KIT 5.10.02.6340 Softing OPC UA C++ Software Development KIT 5.10.03.6594 Softing OPC UA C++ Software Development KIT 5.10.03.6665 Softing OPC UA C++ Software Development KIT 5.21.0 Softing OPC UA C++ Software Development KIT 5.21.1 Softing OPC UA C++ Software Development KIT 5.21.2 Softing OPC UA C++ Software Development KIT 5.30.0 Softing OPC UA C++ Software Development KIT 5.30.1 Softing OPC UA C++ Software Development KIT 5.30.2 Softing OPC UA C++ Software Development KIT 5.35.0 Softing OPC UA C++ Software Development KIT 5.36.0 Softing OPC UA C++ Software Development KIT 5.36.1 Softing OPC UA C++ Software Development KIT 5.40.0 Softing OPC UA C++ Software Development KIT 5.41.0 Softing OPC UA C++ Software Development KIT 5.41.1 Softing OPC UA C++ Software Development KIT 5.50.0 Softing OPC UA C++ Software Development KIT 5.51.0 Softing OPC UA C++ Software Development KIT 5.52.0 Softing OPC UA C++ Software Development KIT 5.53.0 Softing OPC UA C++ Software Development KIT 5.53.2 Softing OPC UA C++ Software Development KIT 5.54.0 Softing OPC UA C++ Software Development KIT 5.56.0 Softing OPC UA C++ Software Development KIT 5.57.0 Softing OPC UA C++ Software Development KIT 5.58.0 Softing OPC UA C++ Software Development KIT 5.59.0 Softing OPC UA C++ Software Development KIT 5.60.0 Softing OPC UA C++ Software Development KIT 5.61.0 Softing OPC UA C++ Software Development KIT 5.62.0 Softing OPC UA C++ Software Development KIT 5.62.1 Softing OPC UA C++ Software Development KIT 5.63.0 Softing OPC UA C++ Software Development KIT 5.64.0 Softing OPC UA C++ Software Development KIT 5.65.0 Softing OPC UA C++ Software Development KIT 5.66.0 Softing OPC UA C++ Software Development KIT 5.66.1 Softing OPC UA C++ Software Development KIT 5.70.0 Softing OPC UA C++ Software Development KIT 6 Softing Secure Integration Server - Softing Secure Integration Server 1.22	69
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References