463 matches found
CVE-2023-41151
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...
Code injection
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...
Softing OPC UA C++ SDK Security Vulnerability
The Softing OPC UA C++ SDK is a development kit from Softing Germany. It is used to quickly and easily integrate OPC UA clients and servers. A security vulnerability exists in versions of Softing OPC UA C++ SDK prior to V1.30, which stems from an uncaught exception issue that may cause the...
PT-2023-27826 · Softing · Softing Opc Ua C++ Sdk
Name of the Vulnerable Software and Affected Versions: Softing OPC UA C++ SDK versions prior to 6.30 Description: An uncaught exception issue may cause the application to crash when the server wants to send an error packet, while the socket is blocked on writing. Recommendations: For versions pri...
CVE-2023-41151
CVE-2023-41151 concerns Softing OPC UA C++ SDK for Windows prior to 6.30. The issue is an uncaught exception that may crash the application when the server attempts to send an error packet while a socket is blocked on writing. Affects versions before 6.30; a fix is provided by upgrading to 6.30 o...
CVE-2023-41151
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...
CVE-2023-41151
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing...
CVE-2023-37572
Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSFdiscovery service. The service executable could be changed or the service could be deleted...
CVE-2023-37572
Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSFdiscovery service. The service executable could be changed or the service could be deleted...
Design/Logic Flaw
Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSFdiscovery service. The service executable could be changed or the service could be deleted...
Softing OPC Security Vulnerability
Softing OPC is an OPC OLE for Process Control solution from Softing Germany. A security vulnerability exists in Softing OPC Suite version 5.25 and prior versions, which stems from incorrect access control. An attacker could exploit the vulnerability to obtain sensitive information via weak...
CVE-2023-37572
Softing OPC Suite prior to 5.25 contains an Incorrect Access Control flaw in OSF_discovery service. Weak permissions could allow an attacker to read sensitive information and modify or delete the service executable. CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low complexity, no pri...
CVE-2023-37572
Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSFdiscovery service. The service executable could be changed or the service could be deleted...
CVE-2023-37572
Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSFdiscovery service. The service executable could be changed or the service could be deleted...
PT-2023-26030 · Softing · Softing Opc Suite
Name of the Vulnerable Software and Affected Versions: Softing OPC Suite versions 5.25 and before Description: The issue is related to Incorrect Access Control, allowing attackers to obtain sensitive information via weak permissions in the OSF discovery service. This could enable changes to the...
CVE-2022-48192
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48192
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...