●PocketClawAI security alerts
Sign in
mediumCVSS 6.5NVD status: Modified

CVE-2021-45117

AutoGen: The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases.

ComponentAutoGen
Severitymedium (CVSS 6.5)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published (NVD)2022-03-21
Last modified2026-06-17
Affected versions
ua-nodeset < 1.05.01
simatic_net_pc = 14
simatic_net_pc = 15
simatic_net_pc = 16
simatic_net_pc = 17
sitop_manager all versions
Fixed in1.05.01
WeaknessCWE-476
CISA KEVnot listed

NVD description

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

Does CVE-2021-45117 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for AutoGen.
Check my stack

What to do

  • Upgrade AutoGen to 1.05.01 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Other AutoGen CVEs

medium
CVE-2025-13704CVSS 6.4

The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'head_class' parameter of the 'autogen_me...

AutoGen
2026-01-09

All AutoGen CVEs