Vulnerabilities > Softing > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-08-17 CVE-2022-2336 Unspecified vulnerability in Softing products
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`.
network
low complexity
softing
critical
9.8
2020-08-25 CVE-2020-14524 Out-of-bounds Write vulnerability in Softing OPC
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
network
low complexity
softing CWE-787
critical
9.8
2019-10-10 CVE-2019-11526 Incorrect Permission Assignment for Critical Resource vulnerability in Softing Uagate SI Firmware 1.60.01
An issue was discovered in Softing uaGate SI 1.60.01.
network
low complexity
softing CWE-732
critical
9.8