Product:

Opc_ua_c\+\+_software_development_kit

(Softing)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 16
Date Id Summary Products Score Patch Annotated
2024-05-03 CVE-2023-27334 Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC UA ConditionRefresh requests. By sending a large number of requests, an attacker can consume all available resources on the server. An... Edgeaggregator, Edgeconnector, Opc_ua_c\+\+_software_development_kit, Secure_integration_server N/A
2023-12-14 CVE-2023-41151 An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing. Opc, Opc_ua_c\+\+_software_development_kit, Secure_integration_server 7.5
2022-10-20 CVE-2022-37453 An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types. Edgeaggregator, Edgeconnector, Opc, Opc_ua_c\+\+_software_development_kit, Secure_integration_server, Uagates 7.5
2022-10-20 CVE-2022-39823 An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-free error Opc, Opc_ua_c\+\+_software_development_kit 7.5
2022-03-11 CVE-2021-42262 An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition. Datafeed_opc_suite, Opc_ua_c\+\+_software_development_kit, Secure_integration_server 6.5
2022-03-11 CVE-2021-42577 An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. Datafeed_opc_suite, Opc_ua_c\+\+_software_development_kit, Secure_integration_server 7.5
2022-04-04 CVE-2021-32994 Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations. Opc_ua_c\+\+_software_development_kit 7.5
2022-08-17 CVE-2022-1373 The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk. Edgeaggregator, Edgeconnector, Opc, Opc_ua_c\+\+_software_development_kit, Secure_integration_server, Uagates 7.2
2022-08-17 CVE-2022-1069 A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator, Edgeconnector, Opc, Opc_ua_c\+\+_software_development_kit, Secure_integration_server, Uagates 7.5
2022-08-17 CVE-2022-2547 A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator, Edgeconnector, Opc, Opc_ua_c\+\+_software_development_kit, Secure_integration_server, Uagates 7.5