What’s Vulnerable › Vulnerabilities

CVE-2023-29377

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-14 · updated 2026-09-22
• Weakness: CWE-23

Description

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects.

Affected products

• Softing Secure Integration Server: through 1.22

References

• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2023-02.html
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2023-02.json
• https://www.zerodayinitiative.com/advisories/ZDI-23-1055/

Get alerted when CVE-2023-29377 or the next vulnerability affects your stack