CVE-2021-40873: Softing Datafeed Opc Suite

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and must be restarted.

Affected products

• Softing Datafeed Opc Suite: before 5.18 (fixed in 5.18)
• Softing Edgeconnector: up to and including 2.31
• Softing Opc: before 5.66 (fixed in 5.66)
• Softing Secure Integration Server: up to and including 1.22
• Softing Th Scope: from 3.5
• Softing Uagates: before 1.73 (fixed in 1.73)
• Softing Uatoolkit Embedded: before 1.40 (fixed in 1.40)

Published 2021-11-10. Last modified 2026-06-17.