CVE-2022-2334

Published: Aug 17, 2022Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.

Affected (6)

Products: Softing: Edgeaggregator, Edgeconnector, Opc, Opc Ua C++ Software Development Kit, Secure Integration Server, Uagates

6 products

Opc Ua C++ Software Development Kit

Secure Integration Server

Uagates

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Softing Edgeaggregator	Version 3.1
Softing Edgeconnector	Version 3.1
Softing Opc	Version 5.2
Softing Opc Ua C++ Software Development Kit	Version 6
Softing Secure Integration Server	Version 1.22
Softing Uagates	Version 1.74