What’s Vulnerable › Vulnerabilities

CVE-2022-1748: Softing Secure Integration Server NULL Pointer Dereference

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-17 · updated 2026-06-17
• Weakness: CWE-476

Description

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

Affected products

• Softing edgeAggregator: 3.1
• Softing edgeConnector: 3.1
• Softing Industrial Automation all versions prior to the latest build of version 4.47.0 OPC: 5.2
• Softing OPC UA C++ SDK (Software Development Kit): 6
• Softing Secure Integration Server: 1.22
• Softing Uagates: 1.74

References

• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04

Get alerted when CVE-2022-1748 or the next vulnerability affects your stack