CVE-2021-40873

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation OPC UA C++ SDK versions prior to 5.66 uaToolkit Embedded versions prior to 1.40

Description An issue was discovered that allows remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.

Recommendations For Softing Industrial Automation OPC UA C++ SDK versions prior to 5.66, update to version 5.66 or later to resolve the issue. For uaToolkit Embedded versions prior to 1.40, update to version 1.40 or later to resolve the issue. As a temporary workaround, consider implementing measures to restrict or filter incoming messages to prevent crafted messages from reaching the server.