Vulnerabilities > Softing > Secure Integration Server > 1.22

DATE CVE VULNERABILITY TITLE RISK
2023-12-14 CVE-2023-41151 Improper Handling of Exceptional Conditions vulnerability in Softing OPC and OPC UA C++ Software Development KIT
An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.
network
low complexity
softing CWE-755
7.5
2022-10-20 CVE-2022-37453 Out-of-bounds Write vulnerability in Softing products
An issue was discovered in Softing OPC UA C++ SDK before 6.10.
network
low complexity
softing CWE-787
7.5
2022-08-17 CVE-2022-1373 Path Traversal vulnerability in Softing products
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files.
network
low complexity
softing CWE-22
7.2
2022-03-11 CVE-2021-42262 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Softing products
An issue was discovered in Softing OPC UA C++ SDK before 5.70.
network
low complexity
softing CWE-119
4.0
2022-03-11 CVE-2021-42577 NULL Pointer Dereference vulnerability in Softing products
An issue was discovered in Softing OPC UA C++ SDK before 5.70.
network
low complexity
softing CWE-476
5.0
2021-11-10 CVE-2021-40871 Type Confusion vulnerability in Softing products
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66.
network
low complexity
softing CWE-843
5.0
2021-11-10 CVE-2021-40873 Double Free vulnerability in Softing products
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40.
network
low complexity
softing CWE-415
5.0