CVE-2021-45117: Opcfoundation Ua-Nodeset

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

Affected products

• Opcfoundation Ua-Nodeset: before 1.05.01 (fixed in 1.05.01)
• Siemens SIMATIC Net Pc: version 14 only; version 15 only; version 16 only; version 17 only
• Siemens Sitop Manager: affected versions not specified
• Siemens Telecontrol Server Basic: version 3.0 only

Published 2022-03-21. Last modified 2026-06-17.