CVE-2021-42577: Softing Datafeed Opc Suite

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

Affected products

• Softing Datafeed Opc Suite: up to and including 5.19
• Softing Opc Ua C++ Software Development Kit: before 5.70.0 (fixed in 5.70.0)
• Softing Secure Integration Server: up to and including 1.22

Published 2022-03-11. Last modified 2026-06-17.