critical9.8
CVE-2022-2336
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admi…
Impact
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softing | Edgeaggregator | Version 3.1 |
| Softing | Edgeconnector | Version 3.1 |
| Softing | Opc | Version 5.2 |
| Softing | Opc Ua C\+\+ Software Development Kit | Version 6 |
| Softing | Secure Integration Server | Version 1.22 |
| Softing | Uagates | Version 1.74 |