Buffer Overflow Vulnerability in Softing OPC UA C++ SDK
CVE-2022-37453

7.5HIGH

Key Information:

Vendor

Softing

Status
Secure Integration Server
Opc Ua C\+\+ Software Development Kit
Opc
Edgeconnector
Vendor
CVE Published:
20 October 2022

What is CVE-2022-37453?

A buffer overflow vulnerability has been identified in the Softing OPC UA C++ SDK, present in versions prior to 6.10. This issue arises from unchecked array and matrix bounds in structure data types, which can lead to excess allocation and potentially severe consequences for system integrity. It is essential for users of the affected software to review their implementations and apply necessary updates to prevent exploitation.

References

https://softing.com
https://industrial.softing.com/fileadmin/psirt/downloads/...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.