CVE-2021-32994 — Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-32994

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer PUBLISHED

Description (CNA)

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.

Affected (CNA)

Vendor / product	Versions
Softing / OPC UA C++ SDK (Software Development Kit)	affected 5.59 before 5.64

CWE

CWE-119

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-168-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-168-02

CISA-ADP

No English description supplied.

No references supplied.