CVE-2022-1069 Softing Secure Integration Server Out-of-bounds Read
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Softing Secure Integration Server | = V1.22 | No fix listed |
| Softing edgeAggregator | = 3.1 | No fix listed |
| Softing edgeconnector | = 3.1 | No fix listed |
| Softing opc | = 5.2 | No fix listed |
| Softing opc ua c++ software development kit | = 6 | No fix listed |
| Softing Secure Integration Server | = 1.22 | No fix listed |
| Softing uagates | = 1.74 | No fix listed |
References
- industrial.softing.com mitigation vendor-advisory
- www.cisa.gov mitigation third-party-advisory us-government-resource