Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-2336

Softing Secure Integration Server Improper Authentication

Description

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softing Secure Integration Server

  • V1.22affected

Softing edgeConnector Siemens

  • V3.10affected

Softing edgeConnector 840D

  • V3.10affected

Softing edgeConnector Modbus

  • V3.10affected

Softing edgeAggregator

  • V3.10affected

References