Vulnerabilities

S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation fo…

A vulnerability was identified in Systerel S2OPC up to 1.7.3.

A vulnerability was determined in Systerel S2OPC up to 1.7.3.

A vulnerability has been found in Systerel S2OPC up to 1.7.3.

A weakness has been identified in Systerel S2OPC up to 1.7.3.

Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate issued by this root issuer to be considered trusted

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library.