Lucene search

K

6 matches found

CVE
CVE
added 2022/10/20 9:15 p.m.57 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.

7.5CVSS7.7AI score0.00215EPSS
CVE
CVE
added 2024/05/03 2:15 a.m.48 views

CVE-2023-27336

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnera...

7.5CVSS7.4AI score0.00286EPSS
CVE
CVE
added 2024/05/03 2:15 a.m.47 views

CVE-2023-27334

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerabi...

7.5CVSS7.5AI score0.00592EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.47 views

CVE-2023-39482

Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulner...

6.5CVSS4.8AI score0.00123EPSS
CVE
CVE
added 2024/05/03 3:15 a.m.40 views

CVE-2023-38125

Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The s...

8.8CVSS8AI score0.00486EPSS
CVE
CVE
added 2021/11/10 11:15 p.m.35 views

CVE-2021-40873

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and mus...

7.5CVSS7.4AI score0.00628EPSS