CVE-2022-2338

Published: Aug 17, 2022Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may be captured for use in authenticating to the server.

Affected (6)

Products: Softing: Edgeaggregator, Edgeconnector, Opc, Opc Ua C++ Software Development Kit, Secure Integration Server, Uagates

6 products

Opc Ua C++ Software Development Kit

Secure Integration Server

Uagates

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Softing Edgeaggregator	Version 3.1
Softing Edgeconnector	Version 3.1
Softing Opc	Version 5.2
Softing Opc Ua C++ Software Development Kit	Version 6
Softing Secure Integration Server	Version 1.22
Softing Uagates	Version 1.74