Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

24 records

Vendor: Softing Component: Secure Integration Server Clear all filters
TI-2023-12070 CVE-2023-27335 · GHSA-jgg3-hp8q-5678

Cross-site scripting in Softing edgeAggregator

Priority MEDIUM 46

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01404 Published 2024-05-03 No fix listed CWE-79
TI-2023-21760 CVE-2023-41151 · GHSA-wchp-7c65-4hqg

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows…

Priority MEDIUM 40

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-12-14 No fix listed CWE-400
TI-2022-02158 CVE-2022-2337 · GHSA-xrgh-xg67-h68q

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-00965 CVE-2022-1069 · GHSA-wrf9-xcvq-3jpw

Softing Secure Integration Server Out-of-bounds Read

Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
TI-2022-02156 CVE-2022-2335 · GHSA-cx26-p6xx-w7v5

Softing Secure Integration Server Integer Underflow

Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
TI-2022-01254 CVE-2022-1373 · GHSA-8rff-xvx4-wwhh

Softing Secure Integration Server Relative Path Traversal

Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
TI-2022-01614 CVE-2022-1748 · GHSA-x475-4gwh-773r

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
TI-2022-02157 CVE-2022-2336 · GHSA-rvxf-x8j2-f3x9

Softing Secure Integration Server Improper Authentication

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
TI-2022-02353 CVE-2022-2547 · GHSA-7f33-g274-ch4x

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476