edgeConnector Siemens vulnerabilities

4 known vulnerabilities in edgeConnector Siemens from Softing. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  edgeConnector Siemens: NULL Pointer Dereference

  CVE-2023-27336May 3, 2024Softing

  Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication

• 7.5 High severity

  edgeConnector Siemens: Uncontrolled Resource Consumption

  CVE-2023-27334May 3, 2024SoftingEPSS 1.44%

  Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is

• 9.8 Critical severity

  Secure Integration Server: Improper Authentication

  CVE-2022-2336Aug 17, 2022SoftingEPSS 1.08%

  Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon in

• 7.5 High severity

  Secure Integration Server: NULL Pointer Dereference

  CVE-2022-1748Aug 17, 2022SoftingEPSS 1.06%

  Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.