Softing vulnerabilities
29 CVEs and advisories name Softing as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-29377An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22.
- CVE-2026-13148Memory leak in scan method
- CVE-2023-7339Data collection for dowloading leads into buffer overflow
- CVE-2024-14028Multiple implicit reads in parallel can result in a crash or denial of service
- CVE-2025-13406Scanning for higher HART revision device leads into NULL pointer dereference in live list
- CVE-2025-10461Global file reads caused by improper URL checks in webserver
- CVE-2025-10685HTTP POST with specific higher content length leads into heap corruption
- CVE-2025-7390Bypass the client certificate trust check of an opc.https server while only secure communication is allowed
- CVE-2023-39482Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
- CVE-2023-39481Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability
- CVE-2023-39480Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability
- CVE-2023-39479Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability
- CVE-2023-39478Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability
- CVE-2023-38125Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability
- CVE-2023-27336Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-27335Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2023-27334Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2024-0860Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
- CVE-2023-38126Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability
- CVE-2022-2337Softing Secure Integration Server NULL Pointer Dereference
- CVE-2022-1069Softing Secure Integration Server Out-of-bounds Read
- CVE-2022-2338Softing Secure Integration Server Cleartext Transmission of Sensitive Information
- CVE-2022-2335Softing Secure Integration Server Integer Underflow
- CVE-2022-2334Softing Secure Integration Server Uncontrolled Search Path Element
- CVE-2022-1373Softing Secure Integration Server Relative Path Traversal
- CVE-2022-1748Softing Secure Integration Server NULL Pointer Dereference
- CVE-2022-2336Softing Secure Integration Server Improper Authentication
- CVE-2022-2547Softing Secure Integration Server NULL Pointer Dereference
- CVE-2021-32994Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer