Browse CVEs

HIGH 8.8 CVE-2023-39478 Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attacker… Secure Integration Server Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-39479 Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories o… Secure Integration Server Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-39481 Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute … Secure Integration Server 1.30+ Fix from $1,9502024-05-03 MEDIUM 6.5 CVE-2023-39480 Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to cr… Secure Integration Server Mitigation only Fix from $1,6002024-05-03 MEDIUM 6.5 CVE-2023-39482 Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis… Edgeaggregator 1.30 / 3.70+ Fix from $1,6002024-05-03 HIGH 8.8 CVE-2023-38125 Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote at… Edgeaggregator 1.30 / 3.50+ Fix from $1,9502024-05-03 CRITICAL 9.6 CVE-2023-27335 Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… Edgeaggregator 1.30 / 3.70+ Fix from $2,3002024-05-03 HIGH 7.5 CVE-2023-27334 Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to cre… Edgeaggregator 1.30 / 3.70+ Fix from $1,9502024-05-03 HIGH 7.5 CVE-2023-27336 Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to c… Edgeaggregator 1.30 / 3.70+ Fix from $1,9502024-05-03 HIGH 7.5 CVE-2024-0860 The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets… Edgeaggregator Mitigation only Fix from $1,9502024-03-14 MEDIUM 6.1 CVE-2023-37571 Softing TH SCOPE through 3.70 allows XSS. Th Scope 3.70.1+ Fix from $1,6002024-01-30 HIGH 7.2 CVE-2023-38126EPSS 71% Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e… Edgeaggregator Mitigation only Fix from $1,9502023-12-19 HIGH 7.5 CVE-2023-41151 An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the… Opc after 6.20.1 Fix from $1,9502023-12-14 HIGH 7.5 CVE-2023-37572 Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSF_… Opc 5.30+ Fix from $1,9502023-12-05 HIGH 7.5 CVE-2022-48193 Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL). Smartlink Sw Ht 1.30+ Fix from $1,9502023-11-06 MEDIUM 6.1 CVE-2022-48192 Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript… Smartlink Sw Ht 1.30+ Fix from $1,6002023-11-06 HIGH 7.5 CVE-2022-45920 In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak. Uatoolkit Embedded 1.41+ Fix from $1,9502023-01-26 HIGH 7.5 CVE-2022-44018 In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds … Uatoolkit Embedded 1.41+ Fix from $1,9502023-01-26 HIGH 7.5 CVE-2022-37453 An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bo… Edgeaggregator after 6.00 Fix from $1,9502022-10-20 HIGH 7.5 CVE-2022-39823 An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation p… Opc after 6.00 Fix from $1,9502022-10-20 CRITICAL 9.8 CVE-2022-2336 Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and passwor… Edgeaggregator Mitigation only Fix from $2,3002022-08-17 HIGH 7.5 CVE-2022-2335 A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-2337 A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-2547 A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 MEDIUM 5.3 CVE-2022-2338 Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration int… Edgeaggregator Mitigation only Fix from $1,6002022-08-17 HIGH 7.5 CVE-2022-1069 A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-1748 Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer derefer… Edgeaggregator No fix yet Fix from $1,9502022-08-17 HIGH 7.2 CVE-2022-1373EPSS 13% The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing z… Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.2 CVE-2022-2334EPSS 12% The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to exe… Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2021-32994 Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension ob… Opc Ua C\+\+ Software Development Kit 5.65.0+ Fix from $1,9502022-04-04