Priority MEDIUM 51
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01077 · Published 2022-08-17 · No fix listed CWE-287
Priority MEDIUM 48
The application searches for a library dll that is not found.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.12129 · Published 2022-08-17 · No fix listed CWE-427
Priority MEDIUM 48
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.13164 · Published 2022-08-17 · No fix listed CWE-23
Priority MEDIUM 46
Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01404 · Published 2024-05-03 · No fix listed CWE-79
Priority MEDIUM 43
Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01583 · Published 2024-05-03 · No fix listed CWE-436
Priority MEDIUM 43
Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01583 · Published 2024-05-03 · No fix listed CWE-552
Priority MEDIUM 43
Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01583 · Published 2024-05-03 · No fix listed CWE-668
Priority MEDIUM 43
Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01344 · Published 2024-05-03 · No fix listed CWE-942
Priority MEDIUM 42
A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01607 · Published 2022-08-17 · No fix listed CWE-476
Priority MEDIUM 42
A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01607 · Published 2022-08-17 · No fix listed CWE-476
Priority MEDIUM 42
A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01641 · Published 2022-08-17 · No fix listed CWE-191
Priority MEDIUM 42
A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01641 · Published 2022-08-17 · No fix listed CWE-125
Priority MEDIUM 41
Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01057 · Published 2022-08-17 · No fix listed CWE-476
Priority MEDIUM 40
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.007 · Published 2023-12-14 · No fix listed CWE-400
Priority MEDIUM 40
Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00812 · Published 2024-05-03 · No fix listed CWE-476
Priority MEDIUM 40
An issue was discovered in Softing OPC UA C++ SDK before 6.10.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00855 · Published 2022-10-20 · No fix listed CWE-787
Priority LOW 36
Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01442 · Published 2024-05-03 · No fix listed CWE-400
Priority LOW 35
An issue was discovered in Softing OPC UA C++ SDK before 5.70.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00958 · Published 2022-03-11 · No fix listed CWE-476
Priority LOW 35
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01309 · Published 2021-11-10 · No fix listed CWE-415
Priority LOW 35
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01309 · Published 2021-11-10 · No fix listed CWE-843
Priority LOW 31
Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01222 · Published 2024-05-03 · No fix listed CWE-321
Priority LOW 31
Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01213 · Published 2024-05-03 · No fix listed CWE-552
Priority LOW 30
An issue was discovered in Softing OPC UA C++ SDK before 5.70.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0083 · Published 2022-03-11 · No fix listed CWE-119
Priority LOW 25
Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00206 · Published 2022-08-17 · No fix listed CWE-319
THREATIST.IORead the docs