Advisories · Technology
Softing edgeAggregator.
Every CVE that names Softing edgeAggregator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Bypass the client certificate trust check of an opc.https server while only secure communication is allowed
- Softing OPC UA C++ SDK
- Softing edgeConnector
- Weak cryptography or TLS
- CVSS 7.5 High
Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability
- Softing edgeAggregator
- CWE-942
- CVSS 8.8 High
Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
- Softing edgeAggregator
- Cross-site scripting (XSS)
- CVSS 8.0 High
Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
- Softing edgeConnector
- Softing edgeAggregator
- Weak cryptography or TLS
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability
- Softing edgeAggregator
- Path traversal
- CVSS 7.5 High
Softing Secure Integration Server NULL Pointer Dereference
- Softing Secure Integration Server
- Softing OPC UA C++ SDK
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Softing Secure Integration Server Improper Authentication
- Softing Secure Integration Server
- Softing edgeConnector Siemens
- Authentication bypass