{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "name": "Softing Industrial Automation GmbH",
      "namespace": "https://industrial.softing.com",
      "contact_details": "Softing PSIRT - contact us at psirt@softing.com"
    },
    "title": "Missing release of memory vulnerability in uaToolkit Embedded and smartLink",
    "tracking": {
      "current_release_date": "2024-09-13T10:00:00.000Z",
      "id": "SYT-2024-2",
      "initial_release_date": "2024-03-09T11:19:59.780Z",
      "revision_history": [
        {
          "date": "2024-03-09T11:19:59.780Z",
          "number": "1.0.0",
          "summary": "Initial version"
        },
        {
          "number": "2.0.0",
          "date": "2024-09-13T10:00:00.000Z",
          "summary": "Fixed in smartLink HW-PN V1.03 and smartLink SW-PN V1.03"
        }
      ],
      "status": "final",
      "version": "2.0.0",
      "generator": {
        "date": "2024-09-13T10:50:21.346Z",
        "engine": {
          "version": "2.5.11",
          "name": "Secvisogram"
        }
      }
    },
    "source_lang": "en-US",
    "aggregate_severity": {
      "text": "high"
    },
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The information provided in this disclosure is provided \"as is\" without warranty of any kind.\nSofting disclaims all warranties, either express or implied, including the warranties of\nmerchantability and fitness for a particular purpose. In no event shall Softing or its suppliers be\nliable for any damages whatsoever including direct, indirect, incidental, consequential, loss of\nbusiness profits or special damages, even if Softing or its suppliers have been advised of the\npossibility of such damages.\nSome states do not allow the exclusion or limitation of liability for consequential or incidental\ndamages so the foregoing limitation may not apply.\n",
        "title": "Disclaimer"
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "category": "product_version_range",
        "name": "Softing uaToolkit Embedded >= V1.30 and <= V1.41",
        "product": {
          "product_id": "CSAFPID-0001",
          "name": "Softing uaToolkit Embedded >= V1.30 and <= V1.41"
        }
      },
      {
        "category": "product_version_range",
        "name": "Softing smartLink HW-DP <= V1.30",
        "product": {
          "product_id": "CSAFPID-0002",
          "name": "Softing smartLink HW-DP <= V1.30"
        }
      },
      {
        "product": {
          "product_id": "CSAFPID-0004",
          "name": "Softing smartLink HW-PN V1.02"
        },
        "category": "product_version",
        "name": "Softing smartLink HW-PN V1.02"
      },
      {
        "category": "product_version",
        "name": "Softing smartLink SW-PN V1.02",
        "product": {
          "name": "Softing smartLink SW-PN V1.02",
          "product_id": "CSAFPID-0005"
        }
      },
      {
        "name": "Softing uaToolkit Embedded V1.41.1",
        "category": "product_version",
        "product": {
          "name": "Softing uaToolkit Embedded V1.41.1",
          "product_id": "CSAFPID-0101"
        }
      },
      {
        "category": "product_version",
        "name": "Softing smartLink HW-DP V1.31",
        "product": {
          "name": "Softing smartLink HW-DP V1.31",
          "product_id": "CSAFPID-0102"
        }
      },
      {
        "category": "product_version",
        "name": "Softing smartLink HW-PN V1.03",
        "product": {
          "name": "Softing smartLink HW-PN V1.03",
          "product_id": "CSAFPID-0104"
        }
      },
      {
        "name": "Softing smartLink SW-PN V1.03",
        "category": "product_version",
        "product": {
          "product_id": "CSAFPID-0105",
          "name": "Softing smartLink SW-PN V1.03"
        }
      }
    ]
  },
  "vulnerabilities": [
    {
      "scores": [
        {
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM"
          }
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ],
        "fixed": [
          "CSAFPID-0101",
          "CSAFPID-0102",
          "CSAFPID-0104",
          "CSAFPID-0105"
        ]
      },
      "notes": [
        {
          "category": "summary",
          "text": "When an OPC UA subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled, leading to memory consumption.\nWhen that happens often enough, the device will be out of memory, i.e.,\na denial of service.\n"
        }
      ],
      "discovery_date": "2024-03-09T11:19:59.780Z",
      "remediations": [
        {
          "category": "workaround",
          "details": "Deactivate the define TOOLKIT_IMPLEMENT_EVENTMONITOREDITEMS.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        }
      ],
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "ids": [
        {
          "system_name": "Softing isssue id",
          "text": "2022-22"
        }
      ],
      "cve": "CVE-2024-25075"
    }
  ]
}