PT-2022-24010 · Softing · Softing Opc Ua C++ Sdk

Published 2022-10-20 · Updated 2022-10-25 · CVE-2022-37453

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Softing OPC UA C++ SDK versions prior to 6.10

Description The issue is related to unchecked array and matrix bounds in structure data types, which can lead to a buffer overflow or excess allocation.

Recommendations For versions prior to 6.10, update to version 6.10 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-37453

Affected Products

Softing Opc Ua C++ Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-37453 · Security Note
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-9.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37453 · Vendor Advisory
• https://softing.com · Vendor Advisory
• https://t.me/cibsecurity/51902 · Telegram Post