Browse CVEs

HIGH 8.8 CVE-2023-39478 Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attacker… Secure Integration Server Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-39479 Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories o… Secure Integration Server Mitigation only Fix from $1,9502024-05-03 MEDIUM 6.5 CVE-2023-39480 Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to cr… Secure Integration Server Mitigation only Fix from $1,6002024-05-03 HIGH 7.5 CVE-2024-0860 The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets… Edgeaggregator Mitigation only Fix from $1,9502024-03-14 HIGH 7.2 CVE-2023-38126EPSS 71% Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e… Edgeaggregator Mitigation only Fix from $1,9502023-12-19 CRITICAL 9.8 CVE-2022-2336 Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and passwor… Edgeaggregator Mitigation only Fix from $2,3002022-08-17 HIGH 7.5 CVE-2022-2335 A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-2337 A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-2547 A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 MEDIUM 5.3 CVE-2022-2338 Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration int… Edgeaggregator Mitigation only Fix from $1,6002022-08-17 HIGH 7.5 CVE-2022-1069 A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-1748 Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer derefer… Edgeaggregator No fix yet Fix from $1,9502022-08-17 HIGH 7.2 CVE-2022-1373EPSS 13% The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing z… Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.2 CVE-2022-2334EPSS 12% The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to exe… Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 8.8 CVE-2019-11527 An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter. Uagate Si Firmware No fix yet Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-11528 An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable. Uagate Si Firmware No fix yet Fix from $1,9502019-10-10 CRITICAL 9.8 CVE-2019-11526 An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This e… Uagate Si Firmware No fix yet Fix from $2,3002019-10-10