// For flags

CVE-2021-45117

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

Los stubs de pila ANSI C autogenerados por OPC (en los NodeSets) no manejan todos los casos de error. Esto puede conllevar a una desreferencia de puntero NULL

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-12-16 CVE Reserved
  • 2022-03-21 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • 2024-10-25 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-476: NULL Pointer Dereference
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Opcfoundation
Search vendor "Opcfoundation"
Ua-nodeset
Search vendor "Opcfoundation" for product "Ua-nodeset"
< 1.05.01
Search vendor "Opcfoundation" for product "Ua-nodeset" and version " < 1.05.01"
-
Affected
Siemens
Search vendor "Siemens"
Simatic Net Pc
Search vendor "Siemens" for product "Simatic Net Pc"
14
Search vendor "Siemens" for product "Simatic Net Pc" and version "14"
-
Affected
Siemens
Search vendor "Siemens"
Simatic Net Pc
Search vendor "Siemens" for product "Simatic Net Pc"
15
Search vendor "Siemens" for product "Simatic Net Pc" and version "15"
-
Affected
Siemens
Search vendor "Siemens"
Simatic Net Pc
Search vendor "Siemens" for product "Simatic Net Pc"
16
Search vendor "Siemens" for product "Simatic Net Pc" and version "16"
-
Affected
Siemens
Search vendor "Siemens"
Simatic Net Pc
Search vendor "Siemens" for product "Simatic Net Pc"
17
Search vendor "Siemens" for product "Simatic Net Pc" and version "17"
-
Affected
Siemens
Search vendor "Siemens"
Sitop Manager
Search vendor "Siemens" for product "Sitop Manager"
--
Affected
Siemens
Search vendor "Siemens"
Telecontrol Server Basic
Search vendor "Siemens" for product "Telecontrol Server Basic"
3.0
Search vendor "Siemens" for product "Telecontrol Server Basic" and version "3.0"
-
Affected