Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: Softing Component: Opc Ua C++ Software Development Kit Clear all filters
TI-2023-21760 CVE-2023-41151 · GHSA-wchp-7c65-4hqg

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows…

Priority MEDIUM 40

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-12-14 No fix listed CWE-400
TI-2022-02158 CVE-2022-2337 · GHSA-xrgh-xg67-h68q

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-00965 CVE-2022-1069 · GHSA-wrf9-xcvq-3jpw

Softing Secure Integration Server Out-of-bounds Read

Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
TI-2022-02156 CVE-2022-2335 · GHSA-cx26-p6xx-w7v5

Softing Secure Integration Server Integer Underflow

Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
TI-2022-01254 CVE-2022-1373 · GHSA-8rff-xvx4-wwhh

Softing Secure Integration Server Relative Path Traversal

Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
TI-2022-01614 CVE-2022-1748 · GHSA-x475-4gwh-773r

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
TI-2022-02157 CVE-2022-2336 · GHSA-rvxf-x8j2-f3x9

Softing Secure Integration Server Improper Authentication

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
TI-2022-02353 CVE-2022-2547 · GHSA-7f33-g274-ch4x

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2021-12602 CVE-2021-32994 · GHSA-f933-7c3x-46v4

Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Priority MEDIUM 42

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01694 Published 2022-04-04 Fixed in 5.64 CWE-119