CVE-2021-40872: Softing Smartlink Hw-Dp

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassing security checks) by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of an invalid type cast, and must be restarted.

Affected products

• Softing Smartlink Hw-Dp: up to and including 1.10
• Softing Uatoolkit Embedded: before 1.40 (fixed in 1.40)

Published 2021-11-10. Last modified 2026-06-17.