PT-2022-25016 · Softing · Softing Opc Ua C++ Sdk

Published 2022-10-20 · Updated 2022-10-25 · CVE-2022-39823

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Softing OPC UA C++ SDK versions 5.66 through 6.x before 6.10

Description An issue was discovered where an OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-free error.

Recommendations For versions 5.66 through 6.x before 6.10, update to version 6.10 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-39823

Affected Products

Softing Opc Ua C++ Sdk

References · 5

• https://osv.dev/vulnerability/CVE-2022-39823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39823 · Security Note
• https://softing.com · Vendor Advisory
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-8.html · Vendor Advisory
• https://t.me/cibsecurity/51904 · Telegram Post