CVE-2021-40871

HIGH 7.5CVE-2021-40871 · Published 10/11/2021 · updated 17/06/2026

In short

CVE-2021-40871 is a HIGH (CVSS 7.5) vulnerability affecting datafeed opc suite (softing), opc (softing), secure integration server (softing).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.6% of all vulnerabilities.
Fix: update to 5.18, 5.66 or later.

Package	Affected versions	Patched versions
datafeed opc suite softing	`< 5.18`	`5.18`
opc softing	`< 5.66`	`5.66`
secure integration server softing	`≤ 1.22`	No fix yet
th scope softing	`≥ 3.5`	No fix yet

Description

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted.

References

industrial.softing.com · Vendor Advisory
industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin-CVE-2021-40871.pdf · Vendor Advisory

More vulnerabilities in datafeed opc suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

datafeed opc suite

softing

< 5.18

5.18

opc

softing

< 5.66

5.66

secure integration server

softing

≤ 1.22

No fix yet

th scope

softing

≥ 3.5

No fix yet

More vulnerabilities in datafeed opc suite

See all →