Denial of Service and Unauthorized Access Vulnerability in Softing Industrial Automation uaToolkit Embedded
CVE-2021-40872 · HIGH Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassing security checks) by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of an invalid type cast, and must be restarted.
Learn more about our Cis Benchmark Audit For Server Software.