Softing Industrial Automation OPC
Successful exploitation of these vulnerabilities could crash the device being accessed. A buffer-overflow condition may also allow remote code execution.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-14524US | critical9.8 | — | ||
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attac… | ||||
| CVE-2020-14522US | high7.5 | — | ||
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Recommended Practicesexternal
- ICS Advisory ICSA-20-210-02 JSONself
- ICS Advisory ICSA-20-210-02 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationOPC
Softing Industrial Automation has released an update to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Softing Industrial Automation website.
https://data-intelligence.softing.com/products/datafeed-opc-sdks/datafeed-opc-classic-da-ae-client-server-sdk-for-windows/#tx-dftabs-tabContent2 - MitigationOPC
Softing Industrial Automation has released an update to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Softing Industrial Automation website.
https://data-intelligence.softing.com/products/datafeed-opc-sdks/datafeed-opc-classic-da-ae-client-server-sdk-for-windows/#tx-dftabs-tabContent2
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan