Read the docs

Softing

Records52All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

Softing records in CISA KEV

No Softing vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Secure Integration Server 24 records MEDIUM Edgeaggregator 17 records HIGH Opc 17 records MEDIUM Edgeconnector 16 records MEDIUM Opc Ua C++ Software Development Kit 16 records MEDIUM Uagates 11 records MEDIUM Datafeed Opc Suite 4 records LOW Uagate Si Firmware 4 records MEDIUM

Records

17 records in Edgeaggregator · all components

TI-2023-19550 CVE-2023-38126 · GHSA-g46x-xw54-6wm3

Path traversal in Softing edgeAggregator

Priority HIGH 69

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.71188 Published 2023-12-19 No fix listed CWE-22
TI-2022-02157 CVE-2022-2336 · GHSA-rvxf-x8j2-f3x9

Softing Secure Integration Server Improper Authentication

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
TI-2022-01254 CVE-2022-1373 · GHSA-8rff-xvx4-wwhh

Softing Secure Integration Server Relative Path Traversal

Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
TI-2023-12070 CVE-2023-27335 · GHSA-jgg3-hp8q-5678

Cross-site scripting in Softing edgeAggregator

Priority MEDIUM 46

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01404 Published 2024-05-03 No fix listed CWE-79
TI-2022-02353 CVE-2022-2547 · GHSA-7f33-g274-ch4x

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-02158 CVE-2022-2337 · GHSA-xrgh-xg67-h68q

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-02156 CVE-2022-2335 · GHSA-cx26-p6xx-w7v5

Softing Secure Integration Server Integer Underflow

Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
TI-2022-00965 CVE-2022-1069 · GHSA-wrf9-xcvq-3jpw

Softing Secure Integration Server Out-of-bounds Read

Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
TI-2022-01614 CVE-2022-1748 · GHSA-x475-4gwh-773r

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
Open these records in search →