Vulnerabilities in Softing

27 results
Vexday analysis

Softing apresenta um perfil de risco moderado com 27 vulnerabilidades conhecidas, sendo 2 críticas, mas nenhuma sob ataque ativo no momento. A ausência de divulgações recentes (últimos 90 dias) e o foco em falhas de desreferência de ponteiro nulo (CWE-476) sugerem um risco contido, sem evidência de exploração em campanha ativa.

CVE-2025-10685HIGHHTTP POST with specific higher content length leads into heap corruptionEPSS 0.5%CVE-2025-10461MEDIUMGlobal file reads caused by improper URL checks in webserverEPSS 0.4%CVE-2023-7339MEDIUMData collection for dowloading leads into buffer overflowEPSS 0.4%CVE-2025-13406MEDIUMScanning for higher HART revision device leads into NULL pointer dereference in live listEPSS 0.3%CVE-2025-7390CRITICALBypass the client certificate trust check of an opc.https server while only secure communication is allowedEPSS 0.3%CVE-2024-14028MEDIUMMultiple implicit reads in parallel can result in a crash or denial of serviceEPSS 0.2%CVE-2022-2338MEDIUMSofting Secure Integration Server Cleartext Transmission of Sensitive InformationEPSS 0.2%