CVE-2021-42577

HIGH 7.5CVE-2021-42577 · Published 11/03/2022 · updated 17/06/2026

In short

CVE-2021-42577 is a HIGH (CVSS 7.5) vulnerability affecting datafeed opc suite (softing), opc ua c++ software development kit (softing), secure integration server (softing).
Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.5% of all vulnerabilities.
Fix: update to 5.70.0 or later.

Package	Affected versions	Patched versions
datafeed opc suite softing	`≤ 5.19`	No fix yet
opc ua c++ software development kit softing	`< 5.70.0`	`5.70.0`
secure integration server softing	`≤ 1.22`	No fix yet

Description

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

References

industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42577.pdf · Vendor Advisory
softing.com · Vendor Advisory

More vulnerabilities in datafeed opc suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free