HIGH🇬🇧 English

CVE-2022-37453

CVSS 7.5v3.1pub. 2022-10-20upd. 2025-05-08

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Softing Edgeaggregator

    APP
    Softing
    ≤ 3.50

  • Softing Edgeconnector

    APP
    Softing
    ≤ 3.50

  • Softing Opc

    APP
    Softing
    ≤ 5.22

  • Softing Opc Ua C\+\+ Software Development Kit

    APP
    Softing
    ≤ 6.00

  • Softing Secure Integration Server

    APP
    Softing
    ≤ 1.22

  • Softing Uagates

    APP
    Softing
    ≤ 1.74
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2023-27335CRITICAL9.6PL ✓ten sam produkt

Softing edgeAggregator: XSS umożliwiający RCE z uprawnieniami root

CVE-2022-2336CRITICAL9.8ten sam produkt

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administr...

CVE-2020-14524CRITICAL9.8ten sam produkt

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product i...

CVE-2023-27334HIGH7.5ten sam produkt

Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulne...

CVE-2023-27336HIGH7.5ten sam produkt

Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vul...