CVE-2022-1748

moderate-risk

Published 2022-08-17

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.

Do I need to act?

0.37% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (6)

Edgeaggregator

Edgeconnector

Opc

Opc Ua C\+\+ Software Development Kit

Secure Integration Server

Uagates

Affected Vendors

Softing

References (4)

Mitigation https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html

Mitigation https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04

Mitigation https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html

Mitigation https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 13/34 · Low