Vulnerability · Published Aug 27, 2021 · Assigned by mitre
CVE-2021-40142
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.6%top 14.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.
Affected products (as reported)
References
- https://opcfoundation.org/security-bulletins/ x_refsource_MISC
- https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-40142.pdf x_refsource_MISC
- https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf x_refsource_CONFIRM