What’s Vulnerable › Vulnerabilities

CVE-2021-42262

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-11 · updated 2026-06-17
• Weakness: CWE-119

Description

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

Affected products

• Softing Datafeed Opc Suite: through 5.19
• Softing OPC UA C++ SDK (Software Development Kit): from 5.56.0 before 5.70.0 — fixed in 5.70.0
• Softing Secure Integration Server: through 1.22

How to fix

Upgrade to a fixed version: Softing OPC UA C++ SDK (Software Development Kit) 5.70.0. Check the vendor advisory for mitigations.

References

• https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
• https://industrial.softing.com/us/solutions/opc-and-opc-ua.html
• https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
• https://industrial.softing.com/us/solutions/opc-and-opc-ua.html

Get alerted when CVE-2021-42262 or the next vulnerability affects your stack