Lucene search
+L

33 matches found

Vulnrichment
Vulnrichment
•added 2024/03/14 8:54 p.m.•26 views

CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests...

8CVSS6.4AI score0.00513EPSS
SaveExploits0References1
ICS
ICS
•added 2024/03/14 6:00 a.m.•80 views

Softing edgeConnector

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION : Low attack complexity Vendor : Softing Equipment : edgeConnector Vulnerabilities : Cleartext Transmission of Sensitive Information, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could create conditions...

8CVSS8AI score0.71188EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•16 views

Softing edgeConnector and Softing edgeAggregator Security Vulnerabilities

Softing edgeAggregator and Softing edgeConnector are both products of Softing. softing edgeAggregator is a flexible and container-based solution for managing complex system architectures for OT/IT integration into edge and cloud applications. softing edgeConnector is a Docker-based software...

8CVSS6.3AI score0.00513EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/08/09 12:00 a.m.•16 views

PT-2023-21069 · Softing · Softing Edgeconnector Siemens

Name of the Vulnerable Software and Affected Versions: Softing edgeConnector Siemens affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required t...

7.5CVSS7.6AI score0.01442EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2023/08/09 12:00 a.m.•36 views

(0Day) (Pwn2Own) Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC client certificates. The issue results...

7.5CVSS6.6AI score0.00812EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/02/22 12:00 a.m.•43 views

PT-2023-4614 · Softing · Softing Edgeconnector Siemens

Name of the Vulnerable Software and Affected Versions: Softing edgeConnector Siemens affected versions not specified Description: The issue is related to a null pointer dereference error in the handling of OPC client certificates, which can be exploited by remote attackers to create a...

7.8CVSS7.6AI score0.00812EPSS
SaveExploits0References5
NVD
NVD
•added 2022/08/17 9:15 p.m.•42 views

CVE-2022-2336

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...

9.8CVSS0.00996EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/17 9:15 p.m.•22 views

CVE-2022-1748

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability...

7.5CVSS0.00977EPSS
SaveExploits0References2
Prion
Prion
•added 2022/08/17 9:15 p.m.•28 views

Default credentials

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...

7.5CVSS9.5AI score0.00996EPSS
SaveExploits0References2Affected Software6
Prion
Prion
•added 2022/08/17 9:15 p.m.•26 views

Null pointer dereference

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability...

5CVSS7.6AI score0.00977EPSS
SaveExploits0References2Affected Software6
CVE
CVE
•added 2022/08/17 8:08 p.m.•79 views

CVE-2022-1748

CVE-2022-1748 affects Softing Softing Secure Integration Server and several OPC UA components (OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, uaGate). The issue is a NULL pointer dereference vulnerability, described across multiple sources, with confir...

7.5CVSS7.6AI score0.00977EPSS
SaveExploits0References2Affected Software6
CVE
CVE
•added 2022/08/17 8:07 p.m.•87 views

CVE-2022-2336

CVE-2022-2336 describes an improper authentication flaw in Softing Secure Integration Server, edgeConnector, and edgeAggregator caused by default administrator credentials (admin/admin). The vulnerability enables direct login to perform administrative actions without password change prompts, with...

9.8CVSS9.6AI score0.00996EPSS
SaveExploits0References2Affected Software6
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•19 views

PT-2022-6555 · Softing · Softing Edgeconnector +5

Name of the Vulnerable Software and Affected Versions: Softing OPC UA C++ Server SDK affected versions not specified Softing Secure Integration Server affected versions not specified Softing edgeAggregator affected versions not specified Softing edgeConnector affected versions not specified Softi...

7.8CVSS7.3AI score0.00977EPSS
SaveExploits0References7
Rows per page
Query Builder