CVE-2021-42577

EUVD-2021-29542
An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
softingdatafeed_opc_suite
𝑥
≤ 5.19
softingopc_ua_c\+\+_software_development_kit
𝑥
< 5.70.0
softingsecure_integration_server
𝑥
≤ 1.22
𝑥
= Vulnerable software versions