Vulnerability · Published Aug 17, 2022 · Assigned by icscert
CVE-2022-1373Softing Secure Integration Server Relative Path Traversal
High 7.2
In plain English
A high-severity security flaw in Secure Integration Server from Softing. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 13.2% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Official description
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Softing | Secure Integration Server | V1.22 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04 x_refsource_CONFIRM
- https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-5.html x_refsource_CONFIRM