Read the docs

Softing

Records52All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

Softing records in CISA KEV

No Softing vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Opc · all components

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
Priority MEDIUM 47

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02515 Published 2020-08-25 Fixed in 4.47.0 CWE-122
Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
Priority MEDIUM 40

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-12-14 No fix listed CWE-400
Priority LOW 36

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service co…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01485 Published 2020-08-25 Fixed in 4.47.0 CWE-400
Open these records in search →