Read the docs

Softing

Records52All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

Softing records in CISA KEV

No Softing vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Secure Integration Server 24 records MEDIUM Edgeaggregator 17 records HIGH Opc 17 records MEDIUM Edgeconnector 16 records MEDIUM Opc Ua C++ Software Development Kit 16 records MEDIUM Uagates 11 records MEDIUM Datafeed Opc Suite 4 records LOW Uagate Si Firmware 4 records MEDIUM

Records

52 records

TI-2023-19550 CVE-2023-38126 · GHSA-g46x-xw54-6wm3

Path traversal in Softing edgeAggregator

Priority HIGH 69

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.71188 Published 2023-12-19 No fix listed CWE-22
TI-2022-02157 CVE-2022-2336 · GHSA-rvxf-x8j2-f3x9

Softing Secure Integration Server Improper Authentication

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
TI-2022-01254 CVE-2022-1373 · GHSA-8rff-xvx4-wwhh

Softing Secure Integration Server Relative Path Traversal

Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
TI-2020-11375 CVE-2020-14524 · GHSA-5fr9-rqf5-h94h

Heap-based buffer overflow in Softing Industrial Automation all versions prior to the…

Priority MEDIUM 47

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02515 Published 2020-08-25 Fixed in 4.47.0 CWE-122
TI-2023-12070 CVE-2023-27335 · GHSA-jgg3-hp8q-5678

Cross-site scripting in Softing edgeAggregator

Priority MEDIUM 46

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01404 Published 2024-05-03 No fix listed CWE-79
TI-2022-02353 CVE-2022-2547 · GHSA-7f33-g274-ch4x

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-02158 CVE-2022-2337 · GHSA-xrgh-xg67-h68q

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-02156 CVE-2022-2335 · GHSA-cx26-p6xx-w7v5

Softing Secure Integration Server Integer Underflow

Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
TI-2022-00965 CVE-2022-1069 · GHSA-wrf9-xcvq-3jpw

Softing Secure Integration Server Out-of-bounds Read

Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
TI-2021-12602 CVE-2021-32994 · GHSA-f933-7c3x-46v4

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Priority MEDIUM 42

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01694 Published 2022-04-04 Fixed in 5.64 CWE-119
TI-2022-01614 CVE-2022-1748 · GHSA-x475-4gwh-773r

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
TI-2025-09782 CVE-2025-10685 · GHSA-9r22-hfr9-vvx7

HTTP POST with specific higher content length leads into heap corruption

Priority MEDIUM 40

Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink S…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00524 Published 2026-03-16 Fixed in 1.04, 1.43 CWE-122
TI-2023-21760 CVE-2023-41151 · GHSA-wchp-7c65-4hqg

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows…

Priority MEDIUM 40

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-12-14 No fix listed CWE-400
Load more
Open these records in search →