# Ignition OPC and MS Update KB5004442 / CVE-2021-26414

**URL:** <https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383>\
**Category:** Ignition\
**Created:** [February 21, 2022, 5:29pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383 "2022-02-21T17:29:50Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![econder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/econder/32/40102_2.png) [@econder](https://forum.inductiveautomation.com/u/econder)\
**Post date:** [February 21, 2022, 5:29pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/1 "2022-02-21T17:29:50Z")

</div>

Can you tell me if Ignition OPC communication is affected by CVE-2021-26414 and Microsoft Update KB5004442?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 21, 2022, 5:47pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/2 "2022-02-21T17:47:57Z")

</div>

This is a DCOM server vulnerability. Ignition’s native OPC is OPC/UA, which does not use DCOM at all. If anything in an Ignition deployment would be vulnerable to this, it would be any Classic OPC service running alongside Ignition (OSI PI, old Kepware, RSLinx Classic, etc). You would need to check those products.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 21, 2022, 5:48pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/3 "2022-02-21T17:48:36Z")

</div>

If you have any DCOM (OPC Classic) connections those servers may need a software update. We don’t think any update on Ignition is required.

OPC UA connections are not affected.

---

<div class="post-metadata">

**Author:** ![econder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/econder/32/40102_2.png) [@econder](https://forum.inductiveautomation.com/u/econder)\
**Post date:** [February 21, 2022, 6:37pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/4 "2022-02-21T18:37:33Z")

</div>

Thanks for the quick response!

---

<div class="post-metadata">

**Author:** ![rob.raffaele](https://avatars.discourse-cdn.com/v4/letter/r/d9b06d/32.png) [@rob.raffaele](https://forum.inductiveautomation.com/u/rob.raffaele)\
**Post date:** [February 28, 2022, 1:30pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/5 "2022-02-28T13:30:51Z")

</div>

Is it confirmed that Ignition’s OPC COM Module will not need an update of any kind?

---

<div class="post-metadata">

**Author:** ![larryjones](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/larryjones/32/4102_2.png) [@larryjones](https://forum.inductiveautomation.com/u/larryjones)\
**Post date:** [November 14, 2022, 10:09pm UTC](https://forum.inductiveautomation.com/t/ignition-opc-and-ms-update-kb5004442-cve-2021-26414/56383/6 "2022-11-14T22:09:38Z")

</div>

IA technical support has confirmed that no changes to the OPC-COM module are required. If the Windows Update affects communication between the Ignition OPC-COM module and a 3rd party OPC-DA server then the changes to resolve the issue will need to be made in 3rd party software (the OPC server and/or Windows DCOM settings).