What’s Vulnerable › Vulnerabilities

CVE-2024-25075

• Severity: medium (CVSS 5.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-02 · updated 2026-06-17

Description

An issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption. When that happens often enough, the device will be out of memory, i.e., a denial of service.

References

• https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html
• https://industrial.softing.com/fileadmin/psirt/downloads/2024/syt-2024-2.html

Get alerted when CVE-2024-25075 or the next vulnerability affects your stack