Softing
Softing Secure Integration Server: vulnerabilidades y CVE
Softing Secure Integration Server tiene 25 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE25
Últimos 12 meses1
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-29377 | Media (6.6) | 0.48% | — | 14 sept 2026 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to… |
| CVE-2023-39482 | Media (6.5) | 1.2% | — | 3 may 2024 | Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing… |
| CVE-2023-39481 | Alta (8.8) | 1.6% | — | 3 may 2024 | Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration… |
| CVE-2023-39480 | Media (6.5) | 1.2% | — | 3 may 2024 | Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Softing Secure… |
| CVE-2023-39479 | Alta (8.8) | 1.6% | — | 3 may 2024 | Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integration Server.… |
| CVE-2023-39478 | Alta (8.8) | 1.6% | — | 3 may 2024 | Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing… |
| CVE-2023-38125 | Alta (8.8) | 1.3% | — | 3 may 2024 | Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing… |
| CVE-2023-27336 | Alta (7.5) | 0.81% | — | 3 may 2024 | Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of… |
| CVE-2023-27335 | Crítica (9.6) | 1.4% | — | 3 may 2024 | Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User… |
| CVE-2023-27334 | Alta (7.5) | 1.4% | — | 3 may 2024 | Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing… |
| CVE-2023-41151 | Alta (7.5) | 0.70% | — | 14 dic 2023 | An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on… |
| CVE-2022-37453 | Alta (7.5) | 0.77% | — | 20 oct 2022 | An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types. |
| CVE-2022-2547 | Alta (7.5) | 1.5% | — | 17 ago 2022 | A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
| CVE-2022-2338 | Media (5.3) | 0.21% | — | 17 ago 2022 | Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the… |
| CVE-2022-2337 | Alta (7.5) | 1.5% | — | 17 ago 2022 | A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
| CVE-2022-2336 | Crítica (9.8) | 1.00% | — | 17 ago 2022 | Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to… |
| CVE-2022-2335 | Alta (7.5) | 1.5% | — | 17 ago 2022 | A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
| CVE-2022-2334 | Alta (7.2) | 12% | — | 17 ago 2022 | The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server… |
| CVE-2022-1748 | Alta (7.5) | 0.98% | — | 17 ago 2022 | Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability. |
| CVE-2022-1373 | Alta (7.2) | 13% | — | 17 ago 2022 | The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll… |
| CVE-2022-1069 | Alta (7.5) | 1.5% | — | 17 ago 2022 | A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
| CVE-2021-42577 | Alta (7.5) | 0.96% | — | 11 mar 2022 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. |
| CVE-2021-42262 | Media (6.5) | 0.83% | — | 11 mar 2022 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition. |
| CVE-2021-40873 | Alta (7.5) | 1.3% | — | 10 nov 2021 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or… |
| CVE-2021-40871 | Alta (7.5) | 1.3% | — | 10 nov 2021 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash… |