CVE-2022-1748
- EPSS 0.37%
- Veröffentlicht 17.08.2022 21:15:08
- Zuletzt bearbeitet 21.11.2024 06:41:22
Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.
CVE-2022-1373
- EPSS 68.59%
- Veröffentlicht 17.08.2022 21:15:08
- Zuletzt bearbeitet 21.11.2024 06:40:35
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "rest...
CVE-2022-1069
- EPSS 0.99%
- Veröffentlicht 17.08.2022 21:15:08
- Zuletzt bearbeitet 21.11.2024 06:39:58
A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVE-2021-40873
- EPSS 0.63%
- Veröffentlicht 10.11.2021 23:15:08
- Zuletzt bearbeitet 21.11.2024 06:24:59
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a client or server. The server process may cra...
CVE-2021-40871
- EPSS 0.63%
- Veröffentlicht 10.11.2021 23:15:08
- Zuletzt bearbeitet 21.11.2024 06:24:59
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type...
CVE-2020-14522
- EPSS 0.26%
- Veröffentlicht 25.08.2020 14:15:16
- Zuletzt bearbeitet 21.11.2024 05:03:27
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition.
CVE-2020-14524
- EPSS 1.15%
- Veröffentlicht 25.08.2020 14:15:16
- Zuletzt bearbeitet 21.11.2024 05:03:27
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.