Uagates vulnerabilities

5 known vulnerabilities in Uagates from Softing. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Edgeaggregator: Out-of-bounds Write

  CVE-2022-37453Oct 20, 2022Softing

  An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.

• 9.8 Critical severity

  Secure Integration Server: Improper Authentication

  CVE-2022-2336Aug 17, 2022SoftingEPSS 1.08%

  Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon in

• 7.2 High severity

  Secure Integration Server: Uncontrolled Search Path Element

  CVE-2022-2334Aug 17, 2022SoftingEPSS 12.1%

  The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.

• 7.5 High severity

  Secure Integration Server: NULL Pointer Dereference

  CVE-2022-1748Aug 17, 2022SoftingEPSS 1.06%

  Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

• 7.2 High severity

  Secure Integration Server: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-1373Aug 17, 2022SoftingEPSS 13.2%

  The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore config