Softing Industrial Automation OPC
Successful exploitation of these vulnerabilities could crash the device being accessed. A buffer-overflow condition may also allow remote code execution.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14524US | critical9.8 | — | ||
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attac… | ||||
| CVE-2020-14522US | high7.5 | — | ||
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an… | ||||
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSA-20-210-02 JSONself
- ICS Advisory ICSA-20-210-02 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationOPC
Softing Industrial Automation has released an update to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Softing Industrial Automation website.
https://data-intelligence.softing.com/products/datafeed-opc-sdks/datafeed-opc-classic-da-ae-client-server-sdk-for-windows/#tx-dftabs-tabContent2 - MitigationOPC
Softing Industrial Automation has released an update to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Softing Industrial Automation website.
https://data-intelligence.softing.com/products/datafeed-opc-sdks/datafeed-opc-classic-da-ae-client-server-sdk-for-windows/#tx-dftabs-tabContent2
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan