Skip to content

Softing · weakness class

Memory Corruption

19 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

  1. Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2021-32994Softing · CVSS 7.5 · 1.7% likely

    CWE-119

  2. Softing Secure Integration Server Integer UnderflowCVE-2022-2335Softing · CVSS 7.5 · 1.6% likely

    CWE-191

  3. Softing Secure Integration Server Out-of-bounds ReadCVE-2022-1069Softing · CVSS 7.5 · 1.6% likely

    CWE-125

  4. Softing Secure Integration Server NULL Pointer DereferenceCVE-2022-2547Softing · CVSS 7.5 · 1.6% likely

    CWE-476

  5. Softing Secure Integration Server NULL Pointer DereferenceCVE-2022-2337Softing · CVSS 7.5 · 1.6% likely

    CWE-476

  6. An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassi…CVE-2021-40872Softing · 1.5% likely

    CWE-843

  7. An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sen…CVE-2021-40873Softing · 1.3% likely

    CWE-415

  8. An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA cl…CVE-2021-40871Softing · 1.3% likely

    CWE-843

  9. Softing Secure Integration Server NULL Pointer DereferenceCVE-2022-1748Softing · CVSS 7.5 · 1.1% likely

    CWE-476

  10. An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.CVE-2021-42577Softing · 1.0% likely

    CWE-476

  11. In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscribe…CVE-2022-44018Softing · CVSS 7.5 · 0.9% likely

    CWE-476

  12. An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.CVE-2022-37453Softing · CVSS 7.5 · 0.9% likely

    CWE-787

  13. An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.CVE-2021-42262Softing · 0.8% likely

    CWE-119

  14. Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service VulnerabilityCVE-2023-27336Softing · CVSS 7.5 · 0.8% likely

    CWE-476

  15. An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-fr…CVE-2022-39823Softing · CVSS 7.5 · 0.8% likely

    CWE-416

  16. HTTP POST with specific higher content length leads into heap corruptionCVE-2025-10685Softing · CVSS 7.7 · 0.6% likely

    CWE-122

  17. Data collection for dowloading leads into buffer overflowCVE-2023-7339Softing · CVSS 6.5 · 0.4% likely

    CWE-121

  18. Scanning for higher HART revision device leads into NULL pointer dereference in live listCVE-2025-13406Softing · CVSS 6.8 · 0.4% likely

    CWE-476

  19. Multiple implicit reads in parallel can result in a crash or denial of serviceCVE-2024-14028Softing · CVSS 6.5 · 0.2% likely

    CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.