# cve.now: Softing

The newest entries naming Softing as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-29377](https://cve.now/CVE-2023-29377.md): An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. (CVSS 6.6)
- [CVE-2026-13148](https://cve.now/CVE-2026-13148.md): Memory leak in scan method (CVSS 6.3)
- [CVE-2023-7339](https://cve.now/CVE-2023-7339.md): Data collection for dowloading leads into buffer overflow (CVSS 6.5)
- [CVE-2024-14028](https://cve.now/CVE-2024-14028.md): Multiple implicit reads in parallel can result in a crash or denial of service (CVSS 6.5)
- [CVE-2025-13406](https://cve.now/CVE-2025-13406.md): Scanning for higher HART revision device leads into NULL pointer dereference in live list (CVSS 6.8)
- [CVE-2025-10461](https://cve.now/CVE-2025-10461.md): Global file reads caused by improper URL checks in webserver (CVSS 5.3)
- [CVE-2025-10685](https://cve.now/CVE-2025-10685.md): HTTP POST with specific higher content length leads into heap corruption (CVSS 7.7)
- [CVE-2025-7390](https://cve.now/CVE-2025-7390.md): Bypass the client certificate trust check of an opc.https server while only secure communication is allowed (CVSS 9.1)
- [CVE-2023-39482](https://cve.now/CVE-2023-39482.md): Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability (CVSS 4.9)
- [CVE-2023-39481](https://cve.now/CVE-2023-39481.md): Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability (CVSS 6.6)
- [CVE-2023-39480](https://cve.now/CVE-2023-39480.md): Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability (CVSS 4.4)
- [CVE-2023-39479](https://cve.now/CVE-2023-39479.md): Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability (CVSS 6.6)
- [CVE-2023-39478](https://cve.now/CVE-2023-39478.md): Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability (CVSS 6.6)
- [CVE-2023-38125](https://cve.now/CVE-2023-38125.md): Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2023-27336](https://cve.now/CVE-2023-27336.md): Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability (CVSS 7.5)
- [CVE-2023-27335](https://cve.now/CVE-2023-27335.md): Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-27334](https://cve.now/CVE-2023-27334.md): Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability (CVSS 7.5)
- [CVE-2024-0860](https://cve.now/CVE-2024-0860.md): Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator (CVSS 8.0)
- [CVE-2023-38126](https://cve.now/CVE-2023-38126.md): Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2)
- [CVE-2022-2337](https://cve.now/CVE-2022-2337.md): Softing Secure Integration Server NULL Pointer Dereference (CVSS 7.5)
- [CVE-2022-1069](https://cve.now/CVE-2022-1069.md): Softing Secure Integration Server Out-of-bounds Read (CVSS 7.5)
- [CVE-2022-2338](https://cve.now/CVE-2022-2338.md): Softing Secure Integration Server Cleartext Transmission of Sensitive Information (CVSS 5.7)
- [CVE-2022-2335](https://cve.now/CVE-2022-2335.md): Softing Secure Integration Server Integer Underflow (CVSS 7.5)
- [CVE-2022-2334](https://cve.now/CVE-2022-2334.md): Softing Secure Integration Server Uncontrolled Search Path Element (CVSS 7.2)
- [CVE-2022-1373](https://cve.now/CVE-2022-1373.md): Softing Secure Integration Server Relative Path Traversal (CVSS 7.2)
- [CVE-2022-1748](https://cve.now/CVE-2022-1748.md): Softing Secure Integration Server NULL Pointer Dereference (CVSS 7.5)
- [CVE-2022-2336](https://cve.now/CVE-2022-2336.md): Softing Secure Integration Server Improper Authentication (CVSS 9.8)
- [CVE-2022-2547](https://cve.now/CVE-2022-2547.md): Softing Secure Integration Server NULL Pointer Dereference (CVSS 7.5)
- [CVE-2021-32994](https://cve.now/CVE-2021-32994.md): Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/softing
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.