https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-39482.htmlhttps://patchthecve.com/cve/CVE-2023-39482.htmlWed, 17 Jun 2026 06:12:25 +0000MEDIUM 6.5: Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerahttps://patchthecve.com/cve/CVE-2023-39481.htmlhttps://patchthecve.com/cve/CVE-2023-39481.htmlWed, 17 Jun 2026 06:12:25 +0000HIGH 8.8: Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the ehttps://patchthecve.com/cve/CVE-2023-39480.htmlhttps://patchthecve.com/cve/CVE-2023-39480.htmlWed, 17 Jun 2026 06:12:25 +0000MEDIUM 6.5: Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability,https://patchthecve.com/cve/CVE-2023-39479.htmlhttps://patchthecve.com/cve/CVE-2023-39479.htmlWed, 17 Jun 2026 06:12:25 +0000HIGH 8.8: Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentihttps://patchthecve.com/cve/CVE-2023-39478.htmlhttps://patchthecve.com/cve/CVE-2023-39478.htmlWed, 17 Jun 2026 06:12:25 +0000HIGH 8.8: Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerahttps://patchthecve.com/cve/CVE-2023-38125.htmlhttps://patchthecve.com/cve/CVE-2023-38125.htmlWed, 17 Jun 2026 06:09:29 +0000HIGH 8.8: Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The shttps://patchthecve.com/cve/CVE-2023-27336.htmlhttps://patchthecve.com/cve/CVE-2023-27336.htmlWed, 17 Jun 2026 05:44:49 +0000HIGH 7.5: Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerabhttps://patchthecve.com/cve/CVE-2023-27335.htmlhttps://patchthecve.com/cve/CVE-2023-27335.htmlWed, 17 Jun 2026 05:44:49 +0000CRITICAL 9.6: Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visit ahttps://patchthecve.com/cve/CVE-2023-27334.htmlhttps://patchthecve.com/cve/CVE-2023-27334.htmlWed, 17 Jun 2026 05:44:48 +0000HIGH 7.5: Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerabilhttps://patchthecve.com/cve/CVE-2024-0860.htmlhttps://patchthecve.com/cve/CVE-2024-0860.htmlWed, 17 Jun 2026 06:54:27 +0000HIGH 8.0: The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests. https://patchthecve.com/cve/CVE-2023-37571.htmlhttps://patchthecve.com/cve/CVE-2023-37571.htmlWed, 17 Jun 2026 06:08:28 +0000MEDIUM 6.1: Softing TH SCOPE through 3.70 allows XSS.https://patchthecve.com/cve/CVE-2023-38126.htmlhttps://patchthecve.com/cve/CVE-2023-38126.htmlWed, 17 Jun 2026 06:09:29 +0000HIGH 7.2: Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific flawhttps://patchthecve.com/cve/CVE-2023-41151.htmlhttps://patchthecve.com/cve/CVE-2023-41151.htmlWed, 17 Jun 2026 06:20:45 +0000HIGH 7.5: An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.https://patchthecve.com/cve/CVE-2023-37572.htmlhttps://patchthecve.com/cve/CVE-2023-37572.htmlWed, 17 Jun 2026 06:08:29 +0000HIGH 7.5: Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSF_discovery service. The service executable could be changed or the service could be deleted.https://patchthecve.com/cve/CVE-2022-48193.htmlhttps://patchthecve.com/cve/CVE-2022-48193.htmlWed, 17 Jun 2026 05:14:45 +0000MEDIUM 5.9: Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).https://patchthecve.com/cve/CVE-2022-48192.htmlhttps://patchthecve.com/cve/CVE-2022-48192.htmlWed, 17 Jun 2026 05:14:45 +0000HIGH 7.2: Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application.