ICSA-22-228-04
·
Published 2022-08-16
·
View on CISA ICS-CERT ↗
Softing Secure Integration Server
CVSS 9.8
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
CVEs (9)
Remediations
- Softing Secure Integration Server: V1.30
- The latest software packages can be downloaded from the Softing website.
- Change the admin password or create a new user with administrative rights and delete the default admin user.
- Configure the Windows firewall to block network requests to IP port 9000.
- Disable the HTTP Server in NGINX configuration of the Softing Secure Integration Server, only using the HTTPS server.
- For more details on these vulnerabilities and mitigations, users should see SYT-2022-7, SYT-2022-6, SYT-2022-5, and SYT-2022-4 on the Softing security website.
Affected Vendors
Softing
Affected Products (6)
Softing
·
edgeAggregator
3.1
Softing
·
edgeConnector
3.1
Softing
·
OPC Suite
5.2
Softing
·
OPC UA C++ Server SDK
6
Softing
·
Secure Integration Server
<= 1.22
Softing
·
uaGate
1.74
Affected Sectors
Multiple sectors
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more