Softing edgeConnector Modbus vulnerabilities

Latest Softing edgeConnector Modbus CVEs

Newest publication first

1. CVE-2022-1748 Softing Secure Integration Server NULL Pointer Dereference

   Published 2022-08-17

   High·CVSS 7.5 EPSS 1.1%

   Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

2. CVE-2022-2336 Softing Secure Integration Server Improper Authentication

   Published 2022-08-17

   Critical·CVSS 9.8 EPSS 1.1%

   Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.