What’s Vulnerable › Vulnerabilities
CVE-2022-2337: Softing Secure Integration Server NULL Pointer Dereference
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-08-17 · updated 2026-06-17
- Weakness: CWE-476
Description
A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Affected products
- Softing edgeAggregator: 3.1
- Softing edgeConnector: 3.1
- Softing Industrial Automation all versions prior to the latest build of version 4.47.0 OPC: 5.2
- Softing OPC UA C++ SDK (Software Development Kit): 6
- Softing Secure Integration Server: 1.22
- Softing Uagates: 1.74
References
- https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-4.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
- https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-4.html
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04
Get alerted when CVE-2022-2337 or the next vulnerability affects your stack