PatchTheCVEsofting vulnerabilities
Recent CVEs affecting softing products. 16 tracked.
softing has 16 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2024-05-03. Highest priority: CVE-2023-27335 (score 52/100).
- CVE-2024-0860 HIGH 8.0 DOWNGRADE DOWNGRADE The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which
- CVE-2023-41151 HIGH 7.5 UPGRADE UPGRADE An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may
- CVE-2023-39482 MEDIUM 6.5 UPGRADE UPGRADE Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
- CVE-2023-39481 HIGH 8.8 UPGRADE Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability
- CVE-2023-39480 MEDIUM 6.5 DOWNGRADE Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability
- CVE-2023-39479 HIGH 8.8 DOWNGRADE Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability
- CVE-2023-39478 HIGH 8.8 DOWNGRADE Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability
- CVE-2023-38126 HIGH 7.2 DOWNGRADE Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-38125 HIGH 8.8 UPGRADE UPGRADE Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili
- CVE-2023-37572 HIGH 7.5 UPGRADE Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive i
- CVE-2023-37571 MEDIUM 6.1 UPGRADE Softing TH SCOPE through 3.70 allows XSS.
- CVE-2023-27336 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-27335 CRITICAL 9.6 UPGRADE UPGRADE Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2023-27334 HIGH 7.5 UPGRADE UPGRADE Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2022-48193 MEDIUM 5.9 UPGRADE Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).
- CVE-2022-48192 HIGH 7.2 UPGRADE Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute
FAQ
How do I fix softing vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is softing being exploited right now?
None of the tracked softing CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which softing CVE should I patch first?
CVE-2023-27335 currently ranks highest (52/100): Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability.