Browse CVEs

HIGH 7.5 CVE-2021-42577 An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer der… Datafeed Opc Suite 5.70.0+ Fix from $1,9502022-03-11 MEDIUM 6.5 CVE-2021-42262 An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an … Datafeed Opc Suite 5.70.0+ Fix from $1,6002022-03-11 HIGH 7.5 CVE-2021-40871 An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending c… Datafeed Opc Suite 5.18 / 5.66+ Fix from $1,9502021-11-10 HIGH 7.5 CVE-2021-40872 An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login… Smartlink Hw Dp 1.40+ Fix from $1,9502021-11-10 HIGH 7.5 CVE-2021-40873 An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a … Datafeed Opc Suite 1.40 / 1.73+ Fix from $1,9502021-11-10 MEDIUM 5.4 CVE-2021-29661 Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript … Opc Toolbox after 4.10.1.13035 Fix from $1,6002021-04-02 HIGH 8.8 CVE-2021-29660 A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the … Opc Toolbox after 4.10.1.13035 Fix from $1,9502021-04-02 CRITICAL 9.8 CVE-2020-14524 Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer ove… Opc 4.47.0+ Fix from $2,3002020-08-25 HIGH 7.5 CVE-2020-14522 Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource c… Opc 4.47.0+ Fix from $1,9502020-08-25 HIGH 8.8 CVE-2019-11527 An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter. Uagate Si Firmware No fix yet Fix from $1,9502019-10-10 HIGH 8.8 CVE-2019-15051 An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a malicio… Uagate Si Firmware after 1.71.00.1225 Fix from $1,9502019-10-10 HIGH 7.5 CVE-2019-11528 An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable. Uagate Si Firmware No fix yet Fix from $1,9502019-10-10 CRITICAL 9.8 CVE-2019-11526 An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This e… Uagate Si Firmware No fix yet Fix from $2,3002019-10-10