CVE-2021-42262: An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an…

PriorityP429medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

0.80%

51.9th percentile

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
softing	datafeed_opc_suite	<= 5.19	—
softing	opc_ua_c_+_+_software_development_kit	>= 5.56.0 < 5.70.0	5.70.0
softing	secure_integration_server	<= 1.22	—

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.