Softing
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Secure Integration Server | 15 | – | Sep 14, 2026 |
| edgeAggregator | 7 | – | Aug 21, 2025 |
| edgeConnector Siemens | 4 | – | May 3, 2024 |
| smartLink SW-HT | 3 | – | Mar 17, 2026 |
| smartLink HW-PN | 3 | – | Sep 4, 2026 |
| smartLink SW-PN | 2 | – | Mar 16, 2026 |
| edgeConnector | 2 | – | Aug 21, 2025 |
| edgeConnector 840D | 2 | – | Aug 17, 2022 |
| edgeConnector Modbus | 2 | – | Aug 17, 2022 |
| OPC UA C++ SDK | 2 | – | Aug 21, 2025 |
| smartLink HW-DP | 2 | – | Mar 27, 2026 |
| epGate | 1 | – | Mar 27, 2026 |
| OPC UA C++ SDK (Software Development Kit) | 1 | – | Apr 4, 2022 |
| mbGate | 1 | – | Mar 27, 2026 |
| pnGate | 1 | – | Mar 27, 2026 |
Exploited and recent CVEs
- CVE-2023-29377 An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a di 0.5%
- CVE-2026-13148 Memory leak in scan method 0.4%
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow 0.4%
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow 0.4%
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow 0.4%
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow 0.4%
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow 0.4%
- CVE-2024-14028 Multiple implicit reads in parallel can result in a crash or denial of service 0.2%
- CVE-2024-14028 Multiple implicit reads in parallel can result in a crash or denial of service 0.2%
- CVE-2025-13406 Scanning for higher HART revision device leads into NULL pointer dereference in live list 0.3%
- CVE-2025-10461 Global file reads caused by improper URL checks in webserver 0.4%
- CVE-2025-10461 Global file reads caused by improper URL checks in webserver 0.4%
- CVE-2025-10685 HTTP POST with specific higher content length leads into heap corruption 0.5%
- CVE-2025-10685 HTTP POST with specific higher content length leads into heap corruption 0.5%
- CVE-2025-7390 Bypass the client certificate trust check of an opc.https server while only secure communication is allowed 0.3%
- CVE-2025-7390 Bypass the client certificate trust check of an opc.https server while only secure communication is allowed 0.3%
- CVE-2025-7390 Bypass the client certificate trust check of an opc.https server while only secure communication is allowed 0.3%
- CVE-2023-39482 Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability 1.2%
- CVE-2023-39481 Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability 1.6%
- CVE-2023-39480 Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability 1.2%
- CVE-2023-39479 Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability 1.6%
- CVE-2023-39478 Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability 1.6%
- CVE-2023-38125 Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability 1.3%
- CVE-2023-27336 Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability 0.8%
- CVE-2023-27335 Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability 1.4%
- CVE-2023-27334 Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability 1.4%
- CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator 0.5%
- CVE-2024-0860 Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator 0.5%
- CVE-2023-38126 Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability 71.2%
- CVE-2022-2337 Softing Secure Integration Server NULL Pointer Dereference 1.6%