Vulnerability index

Browse CVEs

43 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Secure Integration Server HIGH 8.8
CVE-2023-39478

Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attacker…

Mitigation only
Fix from $1,950 2024-05-03
Secure Integration Server HIGH 8.8
CVE-2023-39479

Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories o…

Mitigation only
Fix from $1,950 2024-05-03
Secure Integration Server HIGH 8.8
CVE-2023-39481

Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute …

Fix: 1.30+
Fix from $1,950 2024-05-03
Secure Integration Server MEDIUM 6.5
CVE-2023-39480

Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to cr…

Mitigation only
Fix from $1,600 2024-05-03
Edgeaggregator MEDIUM 6.5
CVE-2023-39482

Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis…

Fix: 1.30 / 3.70+
Fix from $1,600 2024-05-03
Edgeaggregator HIGH 8.8
CVE-2023-38125

Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote at…

Fix: 1.30 / 3.50+
Fix from $1,950 2024-05-03
Edgeaggregator CRITICAL 9.6
CVE-2023-27335

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra…

Fix: 1.30 / 3.70+
Fix from $2,300 2024-05-03
Edgeaggregator HIGH 7.5
CVE-2023-27334

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to cre…

Fix: 1.30 / 3.70+
Fix from $1,950 2024-05-03
Edgeaggregator HIGH 7.5
CVE-2023-27336

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to c…

Fix: 1.30 / 3.70+
Fix from $1,950 2024-05-03
Edgeaggregator HIGH 7.5
CVE-2024-0860

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets…

Mitigation only
Fix from $1,950 2024-03-14
Th Scope MEDIUM 6.1
CVE-2023-37571

Softing TH SCOPE through 3.70 allows XSS.

Fix: 3.70.1+
Fix from $1,600 2024-01-30
Edgeaggregator HIGH 7.2
CVE-2023-38126EPSS 71%

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e…

Mitigation only
Fix from $1,950 2023-12-19
Opc HIGH 7.5
CVE-2023-41151

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the…

Fix: after 6.20.1
Fix from $1,950 2023-12-14
Opc HIGH 7.5
CVE-2023-37572

Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSF_…

Fix: 5.30+
Fix from $1,950 2023-12-05
Smartlink Sw Ht HIGH 7.5
CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).

Fix: 1.30+
Fix from $1,950 2023-11-06
Smartlink Sw Ht MEDIUM 6.1
CVE-2022-48192

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript…

Fix: 1.30+
Fix from $1,600 2023-11-06
Uatoolkit Embedded HIGH 7.5
CVE-2022-45920

In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak.

Fix: 1.41+
Fix from $1,950 2023-01-26
Uatoolkit Embedded HIGH 7.5
CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds …

Fix: 1.41+
Fix from $1,950 2023-01-26
Edgeaggregator HIGH 7.5
CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bo…

Fix: after 6.00
Fix from $1,950 2022-10-20
Opc HIGH 7.5
CVE-2022-39823

An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation p…

Fix: after 6.00
Fix from $1,950 2022-10-20
Edgeaggregator CRITICAL 9.8
CVE-2022-2336

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and passwor…

Mitigation only
Fix from $2,300 2022-08-17
Edgeaggregator HIGH 7.5
CVE-2022-2335

A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

Mitigation only
Fix from $1,950 2022-08-17
Edgeaggregator HIGH 7.5
CVE-2022-2337

A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.

Mitigation only
Fix from $1,950 2022-08-17
Edgeaggregator HIGH 7.5
CVE-2022-2547

A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

Mitigation only
Fix from $1,950 2022-08-17
Edgeaggregator MEDIUM 5.3
CVE-2022-2338

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration int…

Mitigation only
Fix from $1,600 2022-08-17
Edgeaggregator HIGH 7.5
CVE-2022-1069

A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.

Mitigation only
Fix from $1,950 2022-08-17
Edgeaggregator HIGH 7.5
CVE-2022-1748

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer derefer…

No fix yet
Fix from $1,950 2022-08-17
Edgeaggregator HIGH 7.2
CVE-2022-1373EPSS 13%

The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing z…

Mitigation only
Fix from $1,950 2022-08-17
Edgeaggregator HIGH 7.2
CVE-2022-2334EPSS 12%

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to exe…

Mitigation only
Fix from $1,950 2022-08-17
Opc Ua C\+\+ Software Development Kit HIGH 7.5
CVE-2021-32994

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension ob…

Fix: 5.65.0+
Fix from $1,950 2022-04-04