PT-2021-22996
CVE-2021-40872
·
تاريخ النشر
2021-11-10
·
تاريخ التحديث
2021-11-16
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Softing Industrial Automation uaToolkit Embedded versions prior to 1.40
Description
An issue allows remote attackers to cause a denial of service (DoS) or login as an anonymous user by sending crafted messages to an OPC/UA server. The server process may crash unexpectedly due to an invalid type cast and must be restarted.
Recommendations
For versions prior to 1.40, update to version 1.40 or later to resolve the issue. As a temporary workaround, consider implementing additional security checks to prevent anonymous login and restricting access to the OPC/UA server to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾