| Package | Affected versions | Patched versions |
|---|---|---|
| edgeaggregator | = 3.1 | |
| edgeconnector | = 3.1 | |
| opc | = 5.2 | |
| opc ua c++ software development kit | = 6 | |
| secure integration server | = 1.22 | |
| uagates | = 1.74 |
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free