CVE-2021-42262

MEDIUM 6.5CVE-2021-42262 · Published 11/03/2022 · updated 17/06/2026

In short

CVE-2021-42262 is a MEDIUM (CVSS 6.5) vulnerability affecting datafeed opc suite (softing), opc ua c++ software development kit (softing), secure integration server (softing).
Chance of exploitation in the next 30 days (EPSS): 0.83%, higher than 57.6% of all vulnerabilities.
Fix: update to 5.70.0 or later.

Package	Affected versions	Patched versions
datafeed opc suite softing	`≤ 5.19`	No fix yet
opc ua c++ software development kit softing	`≥ 5.56.0, < 5.70.0`	`5.70.0`
secure integration server softing	`≤ 1.22`	No fix yet

Description

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

References

industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf · Vendor Advisory
industrial.softing.com/us/solutions/opc-and-opc-ua.html · Vendor Advisory

More vulnerabilities in datafeed opc suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2021-42262 is a MEDIUM (CVSS 6.5) vulnerability affecting datafeed opc suite (softing), opc ua c++ software development kit (softing), secure integration server (softing).

Chance of exploitation in the next 30 days (EPSS): 0.83%, higher than 57.6% of all vulnerabilities.

Fix: update to 5.70.0 or later.

Package

Affected versions

Patched versions

datafeed opc suite

softing

≤ 5.19

No fix yet

opc ua c++ software development kit

softing

≥ 5.56.0, < 5.70.0

5.70.0

secure integration server

softing

≤ 1.22

No fix yet

More vulnerabilities in datafeed opc suite

See all →