OPC UA C++ SDK vulnerabilities

2 known vulnerabilities in OPC UA C++ SDK from Softing. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  OPC UA C++ SDK: Improper Certificate Validation

  CVE-2025-7390Aug 21, 2025Softing

  A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.

• 7.5 High severity

  Secure Integration Server: NULL Pointer Dereference

  CVE-2022-1748Aug 17, 2022SoftingEPSS 1.06%

  Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.