PT-2023-27826 · Softing · Softing Opc Ua C++ Sdk

Published 2023-12-14 · Updated 2023-12-19 · CVE-2023-41151

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Softing OPC UA C++ SDK versions prior to 6.30

Description An uncaught exception issue may cause the application to crash when the server wants to send an error packet, while the socket is blocked on writing.

Recommendations For versions prior to 6.30, update to version 6.30 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Resource Exhaustion

Weakness Enumeration

CWE-755

CWE-400

Related Identifiers

CVE-2023-41151

Affected Products

Softing Opc Ua C++ Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-41151 · Security Note
• https://industrial.softing.com/fileadmin/psirt/downloads/2023/syt-2023-3.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41151 · Vendor Advisory
• https://t.me/cvenotify/64244 · Telegram Post
• https://twitter.com/CVEnew/status/1735377380775215517 · Twitter Post