CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2022-1373
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
Severity
- EPSS
- 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-22, CWE-23
- Published
- Modified
- Record from
- the NVD, synced
Affected
- softing:edgeaggregator
- softing:edgeconnector
- softing:opc
- softing:opc_ua_c\+\+_software_development_kit
- softing:secure_integration_server
- softing:uagates