What’s Vulnerable › Vulnerabilities

CVE-2022-2334: Softing Secure Integration Server Uncontrolled Search Path Element

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-17 · updated 2026-06-17
• Weakness: CWE-427

Description

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.

Affected products

• Softing edgeAggregator: 3.1
• Softing edgeConnector: 3.1
• Softing Industrial Automation all versions prior to the latest build of version 4.47.0 OPC: 5.2
• Softing OPC UA C++ SDK (Software Development Kit): 6
• Softing Secure Integration Server: 1.22
• Softing Uagates: 1.74

References

• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-5.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-5.html
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04

Get alerted when CVE-2022-2334 or the next vulnerability affects your stack