CVE:CVE-2022-37453
CNNVD:CNNVD-202210-1515
Softing OPC UA C++ SDK是德国Softing公司的一个开发包。用于快速轻松地集成 OPC UA 客户端和服务器。
Softing OPC UA C++ SDK 6.10 版本之前存在安全漏洞，该漏洞源于结构数据类型中未检查的数组和矩阵边界，会发生缓冲区溢出或过度分配。
solution:Upgrade softing edgeaggregator to a higher version than 3.50,and avoid the version (,3.50]; Upgrade softing edgeconnector to a higher version than 3.50,and avoid the version (,3.50]; Upgrade softing opc to a higher version than 5.22,and avoid the version (,5.22]; Upgrade softing opc_ua_c++_software_development_kit to a higher version than 6.00,and avoid the version (,6.00]; Upgrade softing secure_integration_server to a higher version than 1.22,and avoid the version (,1.22]; Upgrade softing uagates to a higher version than 1.74,and avoid the version (,1.74]