CVE-2021-40871: Softing Datafeed Opc Suite

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted.

Affected products

• Softing Datafeed Opc Suite: before 5.18 (fixed in 5.18)
• Softing Opc: before 5.66 (fixed in 5.66)
• Softing Secure Integration Server: up to and including 1.22
• Softing Th Scope: from 3.5

Published 2021-11-10. Last modified 2026-06-17.