CVE-2021-40873 : Security Advisory and Response

Softing Industrial Automation OPC UA C++ SDK before 5.66 and uaToolkit Embedded before 1.40 allow remote attackers to cause a denial of service (DoS) via crafted messages, leading to a server process crash due to a double free vulnerability.

Understanding CVE-2021-40873

Softing Industrial Automation OPC UA C++ SDK and uaToolkit Embedded products are vulnerable to a DoS attack, potentially crashing server processes when manipulated by malicious actors.

What is CVE-2021-40873?

The CVE-2021-40873 vulnerability exists in Softing Industrial Automation OPC UA C++ SDK versions before 5.66 and uaToolkit Embedded versions before 1.40, enabling remote threat actors to trigger a DoS attack by sending specially crafted messages to a client or server.

The Impact of CVE-2021-40873

The vulnerability can be exploited by remote attackers to induce a DoS condition, causing server processes to crash unexpectedly due to a double free issue. This can disrupt normal operations and require manual restarts of affected services.

Technical Details of CVE-2021-40873

Softing Industrial Automation OPC UA C++ SDK and uaToolkit Embedded vulnerabilities detailed.

Vulnerability Description

The issue arises from a double free flaw in the affected software versions, allowing attackers to craft messages that, when processed, trigger a crash in server processes, leading to service disruption.

Affected Systems and Versions

Softing Industrial Automation OPC UA C++ SDK versions prior to 5.66
uaToolkit Embedded versions before 1.40

Exploitation Mechanism

Attackers exploit the double free vulnerability by sending maliciously crafted messages to target systems, causing the server processes to crash and necessitating manual intervention.

Mitigation and Prevention

Protective measures and mitigation strategies to address CVE-2021-40873.

Immediate Steps to Take

Apply security patches or updates provided by Softing Industrial Automation promptly.
Implement network segregation to limit exposure of vulnerable systems to untrusted networks.

Long-Term Security Practices

Regularly monitor and restrict incoming network traffic to critical systems.
Conduct security assessments and penetration tests to identify and remediate vulnerabilities proactively.
Train personnel on identifying and responding to potential security threats.

Patching and Updates

Softing Industrial Automation may release patches or software updates to address the CVE-2021-40873 vulnerability. Ensure timely application of these updates to mitigate the risk of exploitation.