Lucene search

[email protected]CVE-2022-1748

HistoryAug 17, 2022 - 9:15 p.m.

CVE-2022-1748

2022-08-1721:15:00

CWE-476

[email protected]

web.nvd.nist.gov

cve-2022-1748

null pointer dereference

softing opc ua

c++ server sdk

secure integration server

edgeconnector

edgeaggregator

opc suite

uagate

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.4%

JSON

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

CPENameOperatorVersion
softing:edgeaggregatorsofting edgeaggregatoreq3.1
softing:secure_integration_serversofting secure integration servereq1.22
softing:edgeconnectorsofting edgeconnectoreq3.1
softing:opcsofting opceq5.2
softing:opc_ua_c\+\+_software_development_kitsofting opc ua c\+\+ software development kiteq6
softing:uagatessofting uagateseq1.74

CPE	Name	Operator	Version
softing:edgeaggregator	softing edgeaggregator	eq	3.1
softing:secure_integration_server	softing secure integration server	eq	1.22
softing:edgeconnector	softing edgeconnector	eq	3.1
softing:opc	softing opc	eq	5.2
softing:opc_ua_c\+\+_software_development_kit	softing opc ua c\+\+ software development kit	eq	6
softing:uagates	softing uagates	eq	1.74

References

industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html

www.cisa.gov/uscert/ics/advisories/icsa-22-228-04

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVE-2022-1748

prion1 cvelist1 zdi1 ics1