NetSight
medium6.6

CVE-2023-29377

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22.

Impact

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects.

Affected products

VendorProductAffected versions
SoftingSofting OPC UA C++ SDK
through 6.20
SoftingSofting Secure Integration Server
through 1.22.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References