Softing Secure Integration Server vulnerabilities

CVE-2023-41151 [HIGH] CWE-755 CVE-2023-41151: An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating s An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing.

CVE-2021-42577 [HIGH] CWE-476 CVE-2021-42577: An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort pack An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

CVE-2021-42262 [MEDIUM] CWE-119 CVE-2021-42262: An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type di An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.

CVE-2022-2338 [MEDIUM] CWE-319 CVE-2022-2338: Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the- Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may be captured for use in authenticating to the server.