Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Softing Component: Uagates Clear all filters
TI-2022-02158 CVE-2022-2337 · GHSA-xrgh-xg67-h68q

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476
TI-2022-00965 CVE-2022-1069 · GHSA-wrf9-xcvq-3jpw

Softing Secure Integration Server Out-of-bounds Read

Priority MEDIUM 42

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-125
TI-2022-02156 CVE-2022-2335 · GHSA-cx26-p6xx-w7v5

Softing Secure Integration Server Integer Underflow

Priority MEDIUM 42

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01641 Published 2022-08-17 No fix listed CWE-191
TI-2022-01254 CVE-2022-1373 · GHSA-8rff-xvx4-wwhh

Softing Secure Integration Server Relative Path Traversal

Priority MEDIUM 48

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13164 Published 2022-08-17 No fix listed CWE-23
TI-2022-01614 CVE-2022-1748 · GHSA-x475-4gwh-773r

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 41

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2022-08-17 No fix listed CWE-476
TI-2022-02157 CVE-2022-2336 · GHSA-rvxf-x8j2-f3x9

Softing Secure Integration Server Improper Authentication

Priority MEDIUM 51

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01077 Published 2022-08-17 No fix listed CWE-287
TI-2022-02353 CVE-2022-2547 · GHSA-7f33-g274-ch4x

Softing Secure Integration Server NULL Pointer Dereference

Priority MEDIUM 42

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-08-17 No fix listed CWE-476