secure integration server vulnerabilities and fixes

Recent CVEs affecting secure integration server, with upgrade or downgrade steps. 10 tracked.

Also searched as: secureintegrationserver.

secure integration server has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-05-03. Highest priority: CVE-2023-27335 (score 52/100).

• CVE-2023-41151 HIGH 7.5 UPGRADE UPGRADE An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may
• CVE-2023-39482 MEDIUM 6.5 UPGRADE UPGRADE Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
• CVE-2023-39481 HIGH 8.8 UPGRADE Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability
• CVE-2023-39480 MEDIUM 6.5 DOWNGRADE Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability
• CVE-2023-39479 HIGH 8.8 DOWNGRADE Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability
• CVE-2023-39478 HIGH 8.8 DOWNGRADE Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability
• CVE-2023-38125 HIGH 8.8 UPGRADE UPGRADE Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili
• CVE-2023-27336 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
• CVE-2023-27335 CRITICAL 9.6 UPGRADE UPGRADE Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
• CVE-2023-27334 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability

FAQ

How do I fix secure integration server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is secure integration server being exploited right now?

None of the tracked secure integration server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which secure integration server CVE should I patch first?

CVE-2023-27335 currently ranks highest (52/100): Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.

RSS feed for secure integration server · ← Back to latest CVEs