Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
SoftingSecure Integration Server*

15 matches found

CVE
CVE•added 2022/03/11 11:15 p.m.•82 views

CVE-2021-42262

An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

6.5CVSS6.4AI score0.0039EPSS
CVE
CVE•added 2022/03/11 11:15 p.m.•73 views

CVE-2021-42577

An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

7.5CVSS7.4AI score0.00409EPSS
CVE
CVE•added 2022/10/20 9:15 p.m.•57 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.

7.5CVSS7.7AI score0.00215EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•50 views

CVE-2023-39481

Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the ...

8.8CVSS7AI score0.00191EPSS
CVE
CVE•added 2024/05/03 2:15 a.m.•48 views

CVE-2023-27335

Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visit ...

9.6CVSS8.6AI score0.00405EPSS
CVE
CVE•added 2024/05/03 2:15 a.m.•48 views

CVE-2023-27336

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnera...

7.5CVSS7.4AI score0.00286EPSS
CVE
CVE•added 2024/05/03 2:15 a.m.•47 views

CVE-2023-27334

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerabi...

7.5CVSS7.5AI score0.00592EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•47 views

CVE-2023-39482

Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulner...

6.5CVSS4.8AI score0.00123EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•42 views

CVE-2023-39478

Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulner...

8.8CVSS6.9AI score0.00227EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•42 views

CVE-2023-39480

Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability...

6.5CVSS5.1AI score0.00264EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•40 views

CVE-2023-38125

Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The s...

8.8CVSS8AI score0.00486EPSS
CVE
CVE•added 2021/11/10 11:15 p.m.•35 views

CVE-2021-40873

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and mus...

7.5CVSS7.4AI score0.00628EPSS
CVE
CVE•added 2024/05/03 3:15 a.m.•35 views

CVE-2023-39479

Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authent...

8.8CVSS6.7AI score0.00419EPSS
CVE
CVE•added 2021/11/10 11:15 p.m.•34 views

CVE-2021-40871

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted.

7.5CVSS7.4AI score0.00628EPSS
CVE
CVE•added 2023/12/14 7:15 p.m.•23 views

CVE-2023-41151

An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.

7.5CVSS7.5AI score0.00342EPSS