CVE-2021-32994: Softing Opc Ua C++ Software Development Kit

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locations.

Affected products

• Softing Opc Ua C++ Software Development Kit: from 5.59.0, before 5.65.0 (fixed in 5.65.0)

Published 2022-04-04. Last modified 2026-06-17.