Softing / Secure Integration Server
24 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-29377 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to… | MEDIUM | 6.6 | Sep 14, 2026 |
| CVE-2023-39482 | Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability | MEDIUM | 6.5 | May 3, 2024 |
| CVE-2023-39481 | Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability | HIGH | 8.8 | May 3, 2024 |
| CVE-2023-39480 | Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability | MEDIUM | 6.5 | May 3, 2024 |
| CVE-2023-39479 | Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability | HIGH | 8.8 | May 3, 2024 |
| CVE-2023-39478 | Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability | HIGH | 8.8 | May 3, 2024 |
| CVE-2023-38125 | Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability | HIGH | 8.8 | May 3, 2024 |
| CVE-2023-27336 | Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability | HIGH | 7.5 | May 3, 2024 |
| CVE-2023-27335 | Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability | CRITICAL | 9.6 | May 3, 2024 |
| CVE-2023-27334 | Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability | HIGH | 7.5 | May 3, 2024 |
| CVE-2023-41151 | An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wa… | HIGH | 7.5 | Dec 14, 2023 |
| CVE-2022-37453 | An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in st… | HIGH | 7.5 | Oct 20, 2022 |
| CVE-2022-2337 | Softing Secure Integration Server NULL Pointer Dereference | HIGH | 7.5 | Aug 17, 2022 |
| CVE-2022-1069 | Softing Secure Integration Server Out-of-bounds Read | HIGH | 7.5 | Aug 17, 2022 |
| CVE-2022-2338 | Softing Secure Integration Server Cleartext Transmission of Sensitive Information | MEDIUM | 5.7 | Aug 17, 2022 |
| CVE-2022-2335 | Softing Secure Integration Server Integer Underflow | HIGH | 7.5 | Aug 17, 2022 |
| CVE-2022-2334 | Softing Secure Integration Server Uncontrolled Search Path Element | HIGH | 7.2 | Aug 17, 2022 |
| CVE-2022-1373 | Softing Secure Integration Server Relative Path Traversal | HIGH | 7.2 | Aug 17, 2022 |
| CVE-2022-1748 | Softing Secure Integration Server NULL Pointer Dereference | HIGH | 7.5 | Aug 17, 2022 |
| CVE-2022-2336 | Softing Secure Integration Server Improper Authentication | CRITICAL | 9.8 | Aug 17, 2022 |
| CVE-2022-2547 | Softing Secure Integration Server NULL Pointer Dereference | HIGH | 7.5 | Aug 17, 2022 |
| CVE-2021-42577 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. | HIGH | 7.5 | Mar 11, 2022 |
| CVE-2021-42262 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-mem… | MEDIUM | 6.5 | Mar 11, 2022 |
| CVE-2021-40873 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of… | HIGH | 7.5 | Nov 10, 2021 |
| CVE-2021-40871 | An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted mes… | HIGH | 7.5 | Nov 10, 2021 |
Showing 1 to 24 of 24 CVEs