Vulnerability · Published Mar 11, 2022 · Assigned by mitre

CVE-2021-42577

High 7.5

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.0%top 38.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://softing.com x_refsource_MISC
https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42577.pdf x_refsource_MISC