Uncaught Exception Vulnerability in Softing OPC UA C++ SDK for Windows
CVE-2023-41151

7.5HIGH

Key Information:

Vendor

Softing

Status
Opc
Opc Ua C\+\+ Software Development Kit
Secure Integration Server
Vendor
CVE Published:
14 December 2023

What is CVE-2023-41151?

An issue has been identified in the Softing OPC UA C++ SDK for Windows prior to version 6.30, where an uncaught exception may lead to application crashes. This occurs specifically when the SDK attempts to send an error packet while the socket is blocked from writing, potentially disrupting service and affecting operational workflows. Users are advised to update to the latest version to mitigate this risk and ensure stable application performance.

References

https://industrial.softing.com/fileadmin/psirt/downloads/...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.