CVE:CVE-2021-45117
CNNVD:CNNVD-202203-1906
UA-Nodeset是美国OPC基金会的一种 UA 节点集。
OPC UA-Nodeset 1.05.01-2022-02-24 版本及之前所有版本存在代码问题漏洞，该漏洞源于自动生成的 ANSI C 堆存储不能处理所有错误情况。
solution:Upgrade opcfoundation ua-nodeset to a higher version than 1.05.01,and avoid the version (,1.05.01); Upgrade siemens simatic_net_pc to a higher version than 14,15,16,17,and avoid the version 14,15,16,17; Upgrade siemens sitop_manager to a higher version than -; Upgrade siemens telecontrol_server_basic to a higher version than 3.0,and avoid the version 3.0