HIGH🇵🇱 Wersja polska

CVE-2022-39823

CVSS 7.5v3.1pub. 2022-10-20upd. 2025-05-08

An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-free error

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Softing Opc

    APP
    Softing
    5.20 – 5.22

  • Softing Opc Ua C\+\+ Software Development Kit

    APP
    Softing
    5.70 – 6.00
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2022-2336CRITICAL9.8PL ✓same product

Softing — domyślne dane uwierzytelniające administratora (admin/admin)

CVE-2020-14524CRITICAL9.8PL ✓same product

Heap-based buffer overflow w Softing Industrial Automation umożliwiający RCE

CVE-2023-27334HIGH7.5same product

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulne...

CVE-2023-41151HIGH7.5same product

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may ...

CVE-2023-37572HIGH7.5same product

Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive i...