Softing · weakness class
Memory Corruption
19 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.
- Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer
- Softing Secure Integration Server Integer Underflow
- Softing Secure Integration Server Out-of-bounds Read
- Softing Secure Integration Server NULL Pointer Dereference
- Softing Secure Integration Server NULL Pointer Dereference
- An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassi…
- An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) by sen…
- An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending crafted messages to a OPC/UA cl…
- Softing Secure Integration Server NULL Pointer Dereference
- An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
- In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscribe…
- An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types.
- An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.
- Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the server limit on continuation points may cause a use-after-fr…
- HTTP POST with specific higher content length leads into heap corruption
- Data collection for dowloading leads into buffer overflow
- Scanning for higher HART revision device leads into NULL pointer dereference in live list
- Multiple implicit reads in parallel can result in a crash or denial of service
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.